Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
keep-starknet-strange/garaga
main @ 307c00a
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Cryptographic Verification Bypass: 2 prior fixes. Scrutinize any change in this area.
hydra/garaga/starknet/groth16_contract_generator: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Verification Bypass: Missing subgroup validation on Groth16 proof points prior to execution of cryptographic pairing checks allows malformed proof inputs to bypass verification. Developers should ensure the contract generator strictly enforces subgroup checks for all proof points.
Cryptographic Verification Bypass: Incomplete or overly restrictive range checks within field element zero-verification functions fail to correctly account for signed or negative values in Cairo constraints. This can lead to validation failures or constraint bypasses under valid negative-value inputs.