A critical logic vulnerability in Nimiq core-rs-albatross allows malicious validators to manipulate block timestamps, leading to unauthorized monetary supply inflation.

The software fails to enforce an upper bound check against the wall clock for block timestamps, allowing an authenticated block-producing validator to set timestamps arbitrarily far in the future. This manipulation directly impacts reward calculations and batch delays, resulting in an inflated monetary supply.

The exploitation of this vulnerability threatens the integrity of the Nimiq blockchain economy by allowing for unauthorized inflation of the currency. With a CVSS score of 8.1, the high impact on data integrity and availability necessitates immediate attention, as it undermines the fundamental trust and economic model of the network.

Immediate Action: As no official patch is currently listed, operators should restrict validator participation to trusted entities and monitor for anomalous timestamp patterns in block production.

Proactive Monitoring: Security teams should monitor blockchain logs and reward calculation outputs for unusual spikes in supply or irregular block generation times that deviate from expected protocol behavior.

Compensating Controls: Implement strict validator monitoring and alerting systems to detect and flag blocks with future-dated timestamps before they are integrated into the canonical chain.

Public Exploit Available: No

Given the potential for permanent economic impact through supply inflation, stakeholders must prioritize the mitigation of this flaw. Although a specific patch is not yet identified, developers should review the commit history provided in the enrichment data to understand the intended fix and consider applying equivalent logic changes to their environments.