Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

interlay/interbtc

              master @ c645294
            

Fixes

CVEs

HIGH

Peak severity

44.4%

Coverage

Highlights

Auth Bypass: 6 prior fixes. Scrutinize any change in this area.

crates/btc-relay/src/lib.rs: most-fixed (3 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Flaws in proof validation and header submission allowed unauthenticated block submissions or bypass of transaction verification. Relayer verification must be strictly enforced on both initialization and standard execution pathways.

Auth Bypass: Failure to gate operations like registering vaults, locking collateral, or requesting issues against a validated running state could allow actions to execute during outages or oracle errors.

Cryptographic Issues: Weaknesses in partial Merkle proof verification can permit malformed or mutated proofs to pass validation, threatening the integrity of the transaction ledger.