Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
adamant-im/adamant-api-jsclient
dev @ b7a9bce
5
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Denial of Service: 2 prior fixes. Scrutinize any change in this area.
groups/sendTokens.js: most-fixed (2 issues). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Arithmetic Over/Underflow: Float-to-integer conversions using BigNumber could resolve to non-integer values when sending tokens, potentially causing improper token allocation or accounting errors. This was resolved by forcing strict integer rounding.
Denial of Service: Floating-point multiplication precision bugs during token transfers could result in unsafe integer assignments, which required the enforcement of BigNumber checks and ES6 safe integer validation.
Cryptographic Issues: Flawed logic checks for 'nonce' and 'senderPublicKey' inputs during decryption could allow malformed cryptographic parameters to bypass validation, risking decryption failures or unexpected behavior in ed2curve conversion.