Security context

Highlights

Denial of Service: 5 prior fixes. Scrutinize any change in this area.

program/src/mine.rs: most-fixed (5 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Denial of Service: Repeated integer overflow panics occur during mining reward calculations when multiplying compounding rates. These calculations must be explicitly cast to u128 and utilize the static base reward rate rather than compounding on mutated values.

Auth Bypass: Inadequate verification of deserialized accounts allows attackers to supply unauthorized proof accounts or bypass check gating on privileged claims, necessitating strict account validation and identity checks.

Auth Bypass: Missing or weak validation of the `config_info` and treasury account identities permits unauthorized account spoofing within the core mining, reset, and upgrade entry points.