Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
wavesplatform/waves
version-1.6.x @ 5a3773d
183
Fixes
0
CVEs
CRITICAL
Peak severity
36.1%
Coverage
Highlights
Denial of Service: 79 prior fixes. Scrutinize any change in this area.
lang: most-fixed (8 issues). Treat as high-risk during review.
106 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical coordination and block-differ paths historically omitted or inverted signature verification checks on newly received blocks and microblocks, allowing unauthenticated blocks to be processed on-chain.
Denial of Service: Cryptographic utility functions within RIDE script execution, such as Merkle root generation and RSA verification, frequently lacked input size and evaluation complexity limits, permitting CPU/memory exhaustion.
Auth Bypass: Vulnerabilities in transaction validation allowed transactions (e.g., Version 2 transactions or smart assets) to bypass consensus feature activation barriers or execute without verifying sufficient sender balances.