Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
evmos/ethermint
main @ fd8c2d2
28
Fixes
0
CVEs
CRITICAL
Peak severity
38.5%
Coverage
Highlights
Denial of Service: 13 prior fixes. Scrutinize any change in this area.
app/ante/ante.go: most-fixed (5 issues). Treat as high-risk during review.
26 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The AnteHandler logic represents the primary barrier against malicious transactions. Failure to register crucial decorators (such as signature verification, sequence validation, or IBC constraints) or allowing invalid message structures (like unwrapped MsgEthereumTx messages) enables complete authentication and fee-collection bypasses.
Denial of Service: Missing gas limits, inadequate fee verification compared to validator minimums, and unchecked gas consumption metrics during transaction checks allow attackers to submit transactions that exhaust validator mempool resources without incurring any execution costs.
Denial of Service: State handling errors, such as removing shared bytecode records on selfdestruct sequences, can result in global contract corruption, disabling unrelated on-chain applications.