Nocksperimental
Generated reports

Generated report detail

ATTACK: missing-domain-separator

Fixture attack-xchain-missing-domain-separator-v0 generated pass at 2026-06-10T22:58:55.224Z.

JSON
Status
pass
Steps
1/1
Invariants
0/1
Snapshots
2

Environment

Mode

mock-fakenet

gRPC Endpoint

n/a

Fakenet Command

model

NEGATIVE CONTROL (expectRejected=true): a multi-EVM cross-chain exploit the invariant MUST catch.

Two EVM endpoints share one EIP-712 domain (chainId hardcoded to 1); a Base authorization is accepted on Optimism.

expectRejected inverts a CAUGHT exploit to a green proof-of-prevention.

Next Actions

  1. Replace mock poke and peek execution with local fakenet adapter calls.
  2. Replace command-backed fakenet metadata probes with stable gRPC-native probes once node surfaces are available.
  3. Persist generated reports under a project workspace.
  4. Add app-specific invariant packs as the NockApp interface stabilizes.

Invariant Packs

No invariant packs referenced.

Run Steps

Observe terminal joint multi-EVM state

bridge

pass

true

Invariant Results

Distinct, re-derived domain per endpoint

critical

fail

Observed DOMAIN: endpoint 8453: domain.chainId 1 != 8453; endpoint 8453: chainId not re-derived at verify (stale on fork); endpoint 10: domain.chainId 1 != 10; endpoint 10: chainId not re-derived at verify (stale on fork); duplicate domain separator across endpoints (cross-chain signature reuse); expected each endpoint has a distinct (chainId,verifyingContract) domain re-derived at verify; authorizations valid only at their bound endpoint, under xchain.domain.

Alerts

No alert policies configured.

Adapter Observations

No adapter observations captured.

State Diffs

PathBeforeAfter
xchain.observedundefinedtrue

Snapshot Timeline

Initial state

initial

41d5b2d5bf0eac01

After observe

observe

9451e8fe636e6d5d

Artifacts

Report ID

lab_attack-xchain-missing-domain-separator-v0_20260610225855224

Report Hash

sha256:48010f1bf4eb63ae78104b96389421ef1f880bb640d0c39358eac34f0d850da3

Snapshot Root

9451e8fe636e6d5d

JSON Path

/bundle/server-functions/default/.nocklab/attack-xchain-missing-domain-separator.report.json

Markdown Path

/bundle/server-functions/default/.nocklab/attack-xchain-missing-domain-separator.report.md

Markdown Bytes

1304

Changed Paths

xchain.observed

Markdown Preview

# ✅ ATTACK: missing-domain-separator Lab Report

Alert Summary

0 triggered, 0 clear

Verification Candidate

Candidate

ATTACK: missing-domain-separator Verification Candidate

Status

watch

Signature

unsigned

Invariant Packs

none

Report Hash

sha256:48010f1bf4eb63ae78104b96389421ef1f880bb640d0c39358eac34f0d850da3

Snapshot Root

9451e8fe636e6d5d