Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

stratisproject/stratisbitcoinfullnode

              master @ f52659f
            

Fixes

CVEs

CRITICAL

Peak severity

20.5%

Coverage

Highlights

Denial of Service: 40 prior fixes. Scrutinize any change in this area.

Stratis.SmartContracts.Core.Validation: most-fixed (4 issues). Treat as high-risk during review.

49 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: A logic inversion bug inside BlockValidator marked validation as successful even when an error was present, allowing invalid blocks to bypass consensus checks completely.

Improper Verification of Cryptographic Signature: Asynchronous transaction script validation tasks were not awaited, allowing block verification to complete without successfully validating cryptographic signatures.

Sandbox Escape: Smart contracts could execute native code outside the execution sandbox via P/Invoke and external module references due to missing deterministic validators.