Read the docs
TI-2022-13155 Aliases CVE-2022-31111

Discrepency in transfer value and actual value due to incorrect truncation in Frontier

Priority LOW 33CWE-670Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance type was incorrectly implemented. This leads to possible discrepancy between appeared EVM transfer value and actual Substrate value transferred. It is recommended that an emergency upgrade to be planned and EVM execution temporarily paused in the mean time. The issue is patched in Frontier master branch commit fed5e0a9577c10bea021721e8c2c5c378e16bf66 and polkadot-v0.9.22 branch commit e3e427fa2e5d1200a784679f8015d4774cedc934. This vulnerability affects only EVM internal states, but not Substrate balance states or node. You can temporarily pause EVM execution (by setting up a Substrate `CallFilter` that disables `pallet-evm` and `pallet-ethereum` calls before the patch can be applied.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01416 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
paritytechfrontiercommits prior to fed5e0a9577c10bea021721e8c2c5c378e16bf66—No fix listedCNA
  • frontier Vendorparitytech Affected commits prior to fed5e0a9577c10bea021721e8c2c5c378e16bf66 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:parity:frontier:-:*:*:*:*:*:*:*not specified by NVDVulnerableparitytech
  • cpe:2.3:a:parity:frontier:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·paritytech

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-31111

References

Patch 4

  • TI-2023-24151 Frontier opcode SUICIDE touches too many storage values on large contracts CVSS 3.1HIGH 7.5
  • TI-2023-12975 Frontier's modexp precompile is slow for even modulus CVSS 3.1HIGH 7.5
  • TI-2022-16433 Message length overflow in frontier CVSS 3.1HIGH 7.1
  • TI-2022-06061 Integer underflow in Frontier CVSS 3.1MEDIUM 6.5
  • TI-2022-18619 Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices CVSS 3.1MEDIUM 5.3
  • TI-2021-17977 Validity check for signed Frontier-specific extrinsic not called in block execution CVSS 3.1MEDIUM 5.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences