Nocksperimental
Generated reports

Generated report detail

ATTACK: signature-replay

Fixture attack-xchain-signature-replay-v0 generated pass at 2026-06-10T22:58:55.224Z.

JSON
Status
pass
Steps
1/1
Invariants
0/1
Snapshots
2

Environment

Mode

mock-fakenet

gRPC Endpoint

n/a

Fakenet Command

model

NEGATIVE CONTROL (expectRejected=true): a multi-EVM cross-chain exploit the invariant MUST catch.

One 3-of-5 attestation signed for Arbitrum (42161) replayed to mint on Optimism (10).

expectRejected inverts a CAUGHT exploit to a green proof-of-prevention.

Next Actions

  1. Replace mock poke and peek execution with local fakenet adapter calls.
  2. Replace command-backed fakenet metadata probes with stable gRPC-native probes once node surfaces are available.
  3. Persist generated reports under a project workspace.
  4. Add app-specific invariant packs as the NockApp interface stabilizes.

Invariant Packs

No invariant packs referenced.

Run Steps

Observe terminal joint multi-EVM state

bridge

pass

true

Invariant Results

Signed payload must bind the target chain

critical

fail

Observed CHAIN-ID REPLAY: wd-001: signed for chain 42161 but applied to 10; expected every cross-chain message's signed payload binds its targetChainId (raw txs use EIP-155), under xchain.crosschain.

Alerts

No alert policies configured.

Adapter Observations

No adapter observations captured.

State Diffs

PathBeforeAfter
xchain.observedundefinedtrue

Snapshot Timeline

Initial state

initial

c19031dc5b43dedf

After observe

observe

d0632922f73154ae

Artifacts

Report ID

lab_attack-xchain-signature-replay-v0_20260610225855224

Report Hash

sha256:ab288d7f4e50abd6ada920d58ed5c9e197ce23e6e7c7f53422596db5bd889478

Snapshot Root

d0632922f73154ae

JSON Path

/bundle/server-functions/default/.nocklab/attack-xchain-signature-replay.report.json

Markdown Path

/bundle/server-functions/default/.nocklab/attack-xchain-signature-replay.report.md

Markdown Bytes

1012

Changed Paths

xchain.observed

Markdown Preview

# ✅ ATTACK: signature-replay Lab Report

Alert Summary

0 triggered, 0 clear

Verification Candidate

Candidate

ATTACK: signature-replay Verification Candidate

Status

watch

Signature

unsigned

Invariant Packs

none

Report Hash

sha256:ab288d7f4e50abd6ada920d58ed5c9e197ce23e6e7c7f53422596db5bd889478

Snapshot Root

d0632922f73154ae