Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lambdaclass/ethrex

              main @ 0c7cddf
            

Fixes

CVEs

CRITICAL

Peak severity

42.4%

Coverage

Highlights

Denial of Service: 49 prior fixes. Scrutinize any change in this area.

crates/blockchain/blockchain.rs: most-fixed (4 issues). Treat as high-risk during review.

56 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Rejecting L2-specific transaction types (0x7d and 0x7e) during L1 block import and validation is critical to prevent malicious or spoofed senders from inserting arbitrary state changes into the blockchain, bypassing consensus controls.

Signature Validation Bypass: Failure to compare the chain ID of imported blocks with the network's configured chain ID allows transactions intended for alternative forks or networks to be replayed and processed, causing massive state splits.

Access Control: The parallel import execution pathway failed to validate the header block_access_list_hash commitment against the actual Block Access List, allowing block producers to bypass security controls over memory locations.