Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

darkrenaissance/darkfi

              master @ 6e0b88c
            

111

Fixes

CVEs

CRITICAL

Peak severity

41.9%

Coverage

Highlights

Auth Bypass: 48 prior fixes. Scrutinize any change in this area.

src/validator/verification.rs: most-fixed (9 issues). Treat as high-risk during review.

96 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographic Issues: A zero-knowledge proof circuit flaw permitted unconstrained properties on minted coins, allowing unauthorized generation of tokens inside the private token mint authority. This bypasses the structural soundness of the zero-knowledge validation state.

Auth Bypass: The DAO execution context suffered from multiple authorization bypasses where parent call context, sibling index validation, and output coin matching were not strictly verified, potentially allowing redirection or unauthorized execution of DAO spend parameters.

Zero-Knowledge Soundness: Omission of public input constraints (such as the 'rho' parameter and commitment bases) within the lead contract circuit allowed attackers to generate structurally valid proofs with unconstrained or manipulated public values.