umee-network/umee
main@ 273fff6
Fixes18
CVEs0
Peak severityHigh
Commits1,801
Regression coverage52.9%
Highlights
Denial of Service: 11 prior fixes. Scrutinize any change in this area.
price-feeder/oracle/convert.go: most-fixed (2 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Denial of Service: Non-deterministic operations such as un-sorted map iterations within block execution logic (like EndBlocker) can lead to a complete consensus halted state across all nodes.
Integer Overflow: High-exponent assets can trigger integer overflows during decimal casting in liquidity calculations, potentially allowing unauthorized borrowing or draining of pools.
Denial of Service: Serializing or invoking formatting methods (such as .String()) on unvalidated or untrusted protobuf messages inside the fee ante handler can cause critical node panics before fees are collected.
Last analyzed 25 Jun 2026, 00:31 UTC