Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
bnb-chain/bsc
master @ 3cf9043
189
Fixes
0
CVEs
CRITICAL
Peak severity
31.6%
Coverage
Highlights
Denial of Service: 110 prior fixes. Scrutinize any change in this area.
crypto: most-fixed (12 issues). Treat as high-risk during review.
109 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Vulnerability: Insecure elliptic curve validation in ECIES decryption during handshakes allows invalid-curve attacks, allowing remote peers to compromise handshake integrity. Explicit IsOnCurve checks must be enforced early on ephemeral public keys.
Denial of Service: Resource exhaustion attacks via malicious transactions can bypass pool validation if bounds (such as maximum nonces, gas limits, and total cost balance overdrafts) are not strictly constrained.
Cryptographic Issue: Coordinate validation in secp256k1 checks must reject values greater than or equal to the prime modulus P to prevent invalid signature values and curve math inconsistencies.