Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Chia-Network/chia-blockchain

              main @ 77397f7
            

186

Fixes

CVEs

CRITICAL

Peak severity

46.7%

Coverage

Highlights

Denial of Service: 66 prior fixes. Scrutinize any change in this area.

chia/full_node/full_node_api.py: most-fixed (15 issues). Treat as high-risk during review.

102 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Numerous fixes address resource exhaustion from unsolicited or excessive peer messages (transactions, compact VDFs, block requests, subscriptions). The attack surface is broad and repeatedly patched, indicating a high residual risk of similar gaps.

Consensus Validation Bypass: Multiple high-severity fixes close bypasses in block body validation (plot filter, generator refs, cost limits, time locks). These are consensus-critical; any bypass can lead to chain splits or invalid state.

Auth Bypass: Several fixes address missing trusted-peer checks and observer-mode key exposure, allowing untrusted peers to influence wallet state or access secrets. These are high-impact because they compromise wallet integrity and confidentiality.