Transaction Replacement Attacks

Mechanism

A transaction replacement attack occurs when a malicious actor replaces a pending, unconfirmed transaction in a cryptocurrency network with a new transaction that has the same nonce but a higher fee or different parameters. This is often executed by monitoring the mempool for pending transactions, then quickly broadcasting a replacement with a higher fee to incentivize miners to include the attacker’s transaction instead. The original transaction is then effectively dropped. It exploits the Replace-By-Fee (RBF) feature.