Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

0xPolygon/bor

              develop @ 3e44cf1
            

Fixes

CVEs

CRITICAL

Peak severity

35.9%

Coverage

Highlights

Auth Bypass: 20 prior fixes. Scrutinize any change in this area.

crypto: most-fixed (11 issues). Treat as high-risk during review.

46 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographic Issues: The codebase has repeatedly accepted ECDSA public keys without verifying that the unmarshaled coordinates actually lie on the expected S256/secp256k1 curves. This can expose the system to invalid curve attacks and signature verification bypasses.

Auth Bypass: The p2p discovery mechanism is prone to routing table poisoning and endpoint hijacking if updates are accepted without rigorous verification of signed sequence numbers and matching transaction hashes.

Cryptographic Issues: Critical mathematical implementation errors in bn256 MulScalar ignored base points or suffered from memory aliasing and register corruption during curve point doubling and multiplication, threatening the validity of cryptographic proofs.