CVE-2021-45700

Name of the Vulnerable Software and Affected Versions: ckb crate versions prior to 0.40.0

Description: The issue allows attackers to cause a denial of service, specifically a Nervos CKB blockchain node crash, by utilizing a dead call as a DepGroup. It is possible to create a malign transaction that uses the dead cell as the DepGroup in the DepCells, which can then crash all the receiving nodes.

Recommendations: For versions prior to 0.40.0, update to version 0.40.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of dead cells as DepGroups in transactions to minimize the risk of node crashes.