Intel

AIKIDO-2026-10344

github.com/ethereum-optimism/op-geth is vulnerable to Always-Incorrect Control Flow Implementation

Always-Incorrect Control Flow Implementation Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Mar 12, 2026

50

Medium Risk

This Affects:

GOgithub.com/ethereum-optimism/op-geth
0.0.1 - 1.101609.1
Fixed in 1.101609.2
Are you affected? Scan for Free

TL;DR

A flaw in the transaction pool handling of op-geth allows interop transactions to persist after a blockchain reorganization. Because these transactions may rely on state derived from an orphaned chain, they could be replayed or executed under inconsistent conditions on the new canonical chain. The issue is addressed by removing interop transactions from the txpool during reorg events.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

github.com/ethereum-optimism/op-geth is vulnerable to Always-Incorrect Control Flow Implementation in versions 0.0.1 - 1.101609.1.

How to fix this

Upgrade the github.com/ethereum-optimism/op-geth library to the patch version.