Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
polkadex-substrate/polkadex
mainnet-release @ 6cf3b90
18
Fixes
0
CVEs
HIGH
Peak severity
57.1%
Coverage
Highlights
Denial of Service: 8 prior fixes. Scrutinize any change in this area.
pallets/ocex/src/lib.rs: most-fixed (3 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Uncaught panic conditions within key BLS signature verification routines can lead to sudden node crashes and network halts during consensus operations. Developers must replace all instances of `.unwrap()` with safe pattern matching.
Auth Bypass: Aggregated signature verification logic previously bypassed authentication checks entirely when the supplied public keys list was empty. Corrective validation must require an explicit non-empty check on key sets prior to verification.
Denial of Service: Sub-account modifications and account-freezing calls did not account for realistic administrative iteration complexity in their weight definitions. This allowed block execution time underpricing, posing a transaction-exhaustion threat.