Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
cyberia-to/go-cyber
main @ cdf00d8
10
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Denial of Service: 5 prior fixes. Scrutinize any change in this area.
app: most-fixed (1 issue). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Lack of block-level bandwidth limits and transaction cost validation in the CheckTx and DeliverTx pipelines can allow nodes to be overwhelmed by over-limit transactions, leading to memory exhaustion and chain halting.
Access Control: Using empty module account creation helpers instead of retrieving existing module accounts can incorrectly reset state variables, such as setting the module account number to 0, which breaks access control.
Cryptographic Issues: Performing double-hashing on the client side before delegating to a signing key that internally hashes inputs results in broken cryptographic signatures and faulty address derivation.