NRDAX now includes known-but-not-reproduced techniques
NRDAX v0.1-import now contains 368 techniques across 21 chains.
- 140 techniques have reproduced instances with bundles.
- 228 techniques are known from public disclosures (CVEs, GHSAs, vendor advisories) but have not been reproduced in the lab.
Known, not just reproduced
Each technique is chain-agnostic and mechanism-defined. A CVE maps to its technique even if no bundle exists yet. Gaps are ranked by volume of real-world references.
The registry remains additive. Existing technique IDs are unchanged.
Explore at nrdax.com. The gaps are visible in the coverage matrix.
Related Posts
Which chains fail the same way
Twenty-eight of the 118 techniques we have reproduced appear on more than one chain. The registry could always report that number but never draw the line between the chains. The chain graph draws it, and most of the lines it draws are arithmetic rather than evidence, which is the part worth publishing.
NRDAX: browsable by chain and family, readable by machines
NRDAX now holds 623 techniques across 64 chains, 103 reproduced with bundles. New per-chain and per-family landing pages, a pretty Atom feed, JSON and STIX 2.1 and knowledge-pack distributions surfaced for machines, and a fix for the first_seen date bug.
NRDAX: the canonical technique registry for decentralized infrastructure attacks
We have published NRDAX, the NullRabbit Decentralised Attack indeX, at nrdax.com. It is the reference registry for attack techniques against decentralized infrastructure: 135 chain-agnostic techniques, grouped into mechanism families, with a coverage matrix across 21 chains.