Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

0xPolygon/cosmos-sdk

              devel @ 1e6fcea
            

159

Fixes

CVEs

CRITICAL

Peak severity

48.7%

Coverage

Highlights

Denial of Service: 43 prior fixes. Scrutinize any change in this area.

x/auth/ante.go: most-fixed (12 issues). Treat as high-risk during review.

95 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The ante handler is the primary transaction gate; multiple historical bypasses allowed unauthorized transactions via skipped signature verification on recheck, missing fee deduction, pubkey/address mismatch, and replay via missing chainID/sequence.

Denial of Service: Block proposal and transaction processing repeatedly lacked gas limits proportional to tx size, key length, or block gas, enabling resource exhaustion and chain halts.

Authorization Bypass: Blocked-address enforcement was inconsistently applied across fund-transfer entry points, allowing funds to be sent to restricted addresses via vesting, grants, and module-to-account transfers.