Possible replay attack when paying to smart contract

Question

I am afraid of a possible replay attack when paying to a smart contract. Given these 3 assumptions

1. An action gas cost may change according to the state of the blockchain (even if its the same action).

2. If I payed to some smart contract (that I didnt created myself), and it run out of gas, I need to retransmit the same funds in a new transaction, with a higher gas price and the next nonce.

3. If an action runs out of gas, it may be re-added to the blockchain and run without running out of gas

Assuming all of those actions, a reply attack is possible! (I understand that waiting for many blocks to avoid forks is a possibility... but it just sounds like a very partials solution)

Any insights?

===EDIT===

Pseudo code of the problem

1. tx1={from=me, to=contract, nonce=10, gas limit=100'000,...}

2. Send (tx1)

3. tx1 run out of gas (needed 100'001 gas..)

4. tx2={from=me, to=contract, nonce=11, gas limit=200'000,...}

5. Send (tx2)

6. Blockchain fork occurred, and tx1 revaluated and tx 1 now approved

7. tx2 approved too

Doable spend occurred

Answer 1

You might be underestimating the difficulty here:

If an action runs out of gas, it may be re-added to the blockchain and run without running out of gas

Transactions from the same account are guaranteed to be mined in nonce order. Appending another one after the failed txn can't be the same nonce. Changing the nonce or increasing the gasPrice in the previously failed transaction would be a different transaction so it would invalidate the signature.

So, no. It may not be re-added tot he chain as suggested.

If it were possible for an attacker to use a copy of a signed transaction to send them again it would happen all the time because full nodes have copies of every transaction.

You may be thinking about chain reorganization issues.

For example, it IS possible to recall a transaction, with some luck, if it's not already mined. You send another transaction with a higher gasPrice and the same nonce and you hope it gets mined first. A miner considering both candidates will probably select the one with the higher gasPrice. Logically, that's sort of like an overwrite that pre-empts the one you want to recall. Importantly, it only works if the original transaction was pending. Once the original transaction is included in the chain no one will accept its demotion/replacement even if it failed.

Hope it helps.