Does Cargo resolve transitive dependencies with a hash? So for example, if I have a dependency on tokio (which depends on tokio_core), I don't /think/ the meta-data on tokio forces the exact version of tokio_core on a first download/update?

In which case, would you not get the same issue, if you do the same attack, but with a transitive dependency which you haven't specified?