Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
1200wd/bitcoinlib
master @ bec99a2
23
Fixes
0
CVEs
HIGH
Peak severity
42.1%
Coverage
Highlights
Information Disclosure: 6 prior fixes. Scrutinize any change in this area.
bitcoinlib/transactions.py: most-fixed (8 issues). Treat as high-risk during review.
9 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical transaction verification logic historically ignored signature verification return values, failed to enforce multisig signature thresholds, and returned positive validation results prematurely. This allowed invalid or incomplete signatures to be marked as valid.
Cryptographic Error: Vulnerabilities in cryptographic logic compromised message signature verification and child key derivation, specifically due to incorrect public key recovery from signatures and improper usage of parent private keys during non-hardened BIP32 derivation.
Information Disclosure: Sensitive private key parameters (such as secret values, private hex, and WIF strings) were historically leaked via default JSON serialization and public key extraction routines, requiring explicit default-exclude filtering.