Security context

Highlights

Auth Bypass: 46 prior fixes. Scrutinize any change in this area.

src/index.ts: most-fixed (28 issues). Treat as high-risk during review.

64 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Bypasses in unstaking transaction logic where standby/active checks were performed on untrusted user-supplied appData rather than authenticated node account IDs. Developers must ensure state-altering operations validate authentic identifier attributes retrieved directly from secure state store caches.

Auth Bypass: Bypasses in core transaction execution where internal transactions skipped robust signature verification or accepted invalid/null developer keys. Strict validation wrappers must enforce that both internal and EVM transactions possess cryptographically verifiable signatures.

Auth Bypass: Flawed logic inside key security verification checks and multi-level signature validations that allowed unauthorized certificate submissions. Precise clearance-level mapping and verification must gate administrative endpoints.