Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
opentensor/subtensor
main @ e367ae6
20
Fixes
0
CVEs
HIGH
Peak severity
52.9%
Coverage
Highlights
Auth Bypass: 15 prior fixes. Scrutinize any change in this area.
pallets/subtensor/src/lib.rs: most-fixed (3 issues). Treat as high-risk during review.
18 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The runtime is highly susceptible to administrative filter bypasses, such as administrative calls being executed via unmapped aliases or incorrect origin matching, allowing unauthorized execution of sensitive functions like subnet owner updates.
Auth Bypass: Validation checks during transaction-pool ingestion can be bypassed if the exact verification logic is omitted or deferred during block execution (pre_dispatch). This can allow invalid or unauthorized transactions to be included by malicious block producers.
Integer Overflow: Unchecked arithmetic operators and unsafe float-to-integer conversions in custom pallets (especially in staking and helper modules) can cause panics or state corruption. Developers must consistently enforce checked or saturating arithmetic.