An unauthenticated capture-replay vulnerability in ZenHive mpp enables attackers to illicitly obtain paid resources by manipulating on-chain transactions.

This is an authentication bypass issue categorized as CWE-294. The vulnerability allows an unauthenticated remote client to capture and replay a legitimate, settled on-chain transfer to gain unauthorized access to paid resources.

The vulnerability poses a significant financial and operational risk by allowing users to bypass payment requirements for services. This leads to direct revenue loss and potential exhaustion of digital resources. Given the CVSS score of 8.7, it represents a high-severity risk that could be easily automated by malicious actors.

Immediate Action: Upgrade to version 0.6.3 or later of ZenHive mpp to implement the necessary replay protection mechanisms.

Proactive Monitoring: Review on-chain transaction logs for duplicate transfer IDs or anomalies in resource allocation that do not correlate with valid payment events.

Compensating Controls: Implement stricter validation logic on the server side to ensure that transaction hashes are tracked and rejected if resubmitted after an initial settlement.

Public Exploit Available: Unknown.

Organizations utilizing ZenHive mpp must upgrade to the patched version immediately to prevent financial exploitation. The nature of the vulnerability makes it an attractive target for automated exploitation, making prompt remediation essential for maintaining the integrity of the payment and resource allocation system.