Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ziesha-network/bazuka

              master @ 75ac4ce
            

Fixes

CVEs

CRITICAL

Peak severity

38.5%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

src/blockchain/mod.rs: most-fixed (3 issues). Treat as high-risk during review.

13 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Inverted logical verification of signatures and calldata allowed unauthorized layer-2 MPN fund withdrawals. Developers must ensure verification outcomes are not logically negated or bypassed.

Cryptographic Error: Processing public keys that are not on-curve or neglecting coordinates during signature validation can compromise cryptographic integrity. Strict validation of all public key points is required.

Auth Bypass: ContractPayment deposits and withdrawals lacked signature validation entirely, facilitating fraudulent transactions. All state-altering transaction structures must explicitly enforce sender authentication.