Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cosmos/ethermint

              development @ 7a83845
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Denial of Service: 2 prior fixes. Scrutinize any change in this area.

app/ante.go: most-fixed (2 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Incomplete transaction validation during signature verification allowed attackers to bypass state execution gates without valid sequence validation, threatening ledger integrity.

Denial of Service: Failure to enforce pre-execution gas billing and early validation of intrinsic gas/signatures enabled malicious actors to launch resource exhaustion and spam attacks without cost.

Authentication Bypass: Omitting essential stateless message validation before executing Ethereum transaction flows could result in processing invalid or unauthorized transactions.