Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
crustio/crust
mainnet @ fecfd87
8
Fixes
0
CVEs
HIGH
Peak severity
83.3%
Coverage
Highlights
Auth Bypass: 8 prior fixes. Scrutinize any change in this area.
runtime/src/tee.rs: most-fixed (4 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical TEE operations like identity registration and work report submissions historically lacked proper cryptographic signature verification or bound signatures to static addresses rather than dynamic caller identities, allowing unauthorized state inserts.
Auth Bypass: Signature verification was severely flawed by validating signatures against the wrong entity (the applier's public key instead of the validator's), enabling spoofing and identity bypass.
Auth Bypass: The lack of identity separation allowed self-certification where an applier could register their own account as the validator, bypassing independent validation requirements.