Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

BitGo/BitGoJS

              master @ 4f32ba2
            

157

Fixes

CVEs

CRITICAL

Peak severity

53.8%

Coverage

Highlights

Auth Bypass: 33 prior fixes. Scrutinize any change in this area.

src/bitgo.js: most-fixed (7 issues). Treat as high-risk during review.

124 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Transaction Verification Bypass: Numerous coin modules had verifyTransaction implementations that returned true without validating recipients, amounts, or signatures, allowing malicious prebuilds to redirect funds. The pattern recurs across many chains, indicating a systemic lack of a shared validation framework.

Auth Bypass: TSS signing paths allowed signing without recipient verification or with empty recipients, enabling unauthorized transactions. Multiple fixes in the same area indicate the guard was incomplete or inconsistently applied across ECDSA and EdDSA flows.

Signature Verification Bypass: Signature parsing and verification had gaps: non-strict DER, missing Schnorr verification, and unverified signatures allowed malleability and forgery. The fixes hardened parsing and added checks, but the breadth of issues suggests ongoing risk in signature handling.