1

I have a question about a nonce in the Ethereum network. I understand that a nonce helps to prevent a replay attack, but there is one particular part that I don't understand.

I have applied my ethereum network over Rinkeby Testnet, which all data besides the nonce is available for the public.

In case of attacker try to replay the transaction with the same value of NONCE, it's clear that a transaction will be denied as duplicate one.

However, What about if the attacker knowns the last Nonce value, for example, 48, and try to duplicate my transaction with NONCE +1, which is 49. What does happen in this case, does the transaction will be succeeded as it has a different nonce value even when the sender is the attacker?

1

The nonce is included in the transaction signature that is signed with the account owner private key.

You need to know both the private key and the next nonce to make a new valid transaction.

| improve this answer | |
  • Thanks for your helpful answer, so from your answer I understand that an attacker may decrypt the transaction hash and get a transaction data, but could not execute it as he doesn't have a private key? Right? – Byo0ona Jun 12 at 18:16
  • Also, what about if the attacker gets the private key of the authorized owner? Does he can complete the transaction successfully, or still could not sign the transaction? Appreciate your help so much. – Byo0ona Jun 12 at 18:18
  • 2
    If the attacker gets the private key, he has everything in that account. He is the owner now, so he can do everything. He also has all the money in that account. So he doesn't need to make double spend attack to steal the money. He can just transfer all the money easily by sending them to his own account. So never lose your private key. – Masoud jt Jun 12 at 18:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.