Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
defich/ain
master @ bd09486
305
Fixes
0
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Denial of Service: 185 prior fixes. Scrutinize any change in this area.
src/validation.cpp: most-fixed (62 issues). Treat as high-risk during review.
106 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Critical monetary inflation and supply corruption risks existed in transaction fee accumulation logic inside ConnectBlock due to missing integer overflow checks during block connection.
Signature Bypass: PSBT signing was vulnerable to signature spoofing and value manipulation because input verification did not strictly check that the provided UTXOs matched the inputs being spent.
Memory Corruption: Deserialization of serialized extended keys (CExtKey) lacked strict length boundaries, introducing severe stack-based buffer overflow risks in cryptographic parsing routes.