CVE-2021-42764

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-20 · updated 2026-06-17

Description

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus decisions), and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain.

Affected products

Proof-Of-Stake Ethereum Project Proof-Of-Stake Ethereum: through 2021-10-19

References

https://arxiv.org/abs/2110.10086
https://arxiv.org/abs/2110.10086

Get alerted when CVE-2021-42764 or the next vulnerability affects your stack