Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
blocknetdx/blocknet
master @ ac930b7
188
Fixes
0
CVEs
CRITICAL
Peak severity
55.9%
Coverage
Highlights
Denial of Service: 107 prior fixes. Scrutinize any change in this area.
src/main.cpp: most-fixed (29 issues). Treat as high-risk during review.
52 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Critical integer overflows in input/output value processing and transaction accumulation allowed bypassing balance restrictions and mining verification. Enforcing strict upper bounds against MAX_MONEY and using 64-bit container types is essential to block validation stability.
Denial of Service: Unbounded resource utilization and infinite loops are triggered when processing invalid blocks or loading unvalidated headers. Memory and CPU exhausting pathways exist in chainstate reorganization and block verification steps if thread-locking and validation queue limits are absent.
Auth Bypass: The XBridge cross-chain transaction and order verification system suffered from authentication and validation bypasses due to missing drift checking, relaxed block height checks, and absent local identity constraints during order execution.