Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
anza-xyz/wallet-adapter
master @ ca73185
3
Fixes
0
CVEs
HIGH
Peak severity
66.7%
Coverage
Highlights
Auth Bypass: 2 prior fixes. Scrutinize any change in this area.
packages/core/base/src/signer.ts: most-fixed (2 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Flaws in transaction property structural checks, such as inspecting the inner message instead of the root transaction object for its version, allowed invalid or malformed transactions to bypass critical restrictions and get signed.
Cryptographic Verification Error: Failing to perform cryptographic verification on signed messages or to adopt standardized message formats (like Sign-In-With-Solana) risks user trust and could allow clients to spoof signatures.