Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
crypto-org-chain/cronos
main @ eccdb57
12
Fixes
2
CVEs
HIGH
Peak severity
58.3%
Coverage
Highlights
Auth Bypass: 5 prior fixes. Scrutinize any change in this area.
x/cronos: most-fixed (2 issues). Treat as high-risk during review.
11 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Authorization checks performed only at the AnteHandler level were bypassed, allowing unauthorized messages to directly reach MsgUpdateTokenMapping and MsgTurnBridge handlers and manipulate core configurations. Explicit handler-level validation is required.
Auth Bypass: Deficiencies in token mapping mechanisms allowed registration of already mapped tokens, zero/precompiled target addresses, and nonexistent contracts. This could lead to asset duplication, fund depletion, or system-wide consistency failures.
Denial of Service: Integer overflow vulnerabilities in gas accumulation during consensus steps (PrepareProposal and ReapTxsHandler) allowed malicious or oversized transactions to exceed block gas constraints or trigger panics.