Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bmresearch/solnet

              master @ e8df87b
            

Fixes

CVEs

HIGH

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

src/Solnet.Programs/Models/TokenProgram/TokenMint.cs: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Bypass: Missing cryptographic validation during transaction deserialization allowed unverified or malformed transactions to be processed. Ensuring rigorous Ed25519 signature verification against public keys on deserialization is critical to prevent spoofing.

Auth Bypass: Misalignment between the order of generated cryptographic signatures and sorted message account keys could result in invalid or bypassable transactions. Signatures must strictly target the sorted ledger-level keys.

Logic Error: Low-level offset deserialization errors (such as reading from an option flag offset instead of the authority field offset) can misidentify privileged identities, leading to incorrect authorization calculations.