Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

autonomys/subspace

              main @ 68cbca4
            

108

Fixes

CVEs

CRITICAL

Peak severity

44.8%

Coverage

Highlights

Denial of Service: 58 prior fixes. Scrutinize any change in this area.

crates/pallet-domains: most-fixed (7 issues). Treat as high-risk during review.

74 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Extrinsics such as 'submit_receipt' and 'submit_fraud_proof' were historically accepted through unsigned channels without comprehensive validation, enabling arbitrary transaction pool spamming and state corruption. Safe enforcement relies on migrating validation to 'TransactionExtension'.

Signature Validation Bypass: The Proof-of-Space verification routine failed to reject proofs when individual table component pairs mismatched, allowing invalid proofs to bypass the match validation checks.

Denial of Service: Parsing of peer-supplied DHT record keys and multihash bytes lacked strict bounds and formatting validation, causing unhandled panics and immediate farmer node crashes on malformed input.