Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

MystenLabs/sui

              main @ 9b971fa
            

299

Fixes

CVEs

CRITICAL

Peak severity

43.8%

Coverage

Highlights

Denial of Service: 114 prior fixes. Scrutinize any change in this area.

crates/sui-core/src/authority.rs: most-fixed (28 issues). Treat as high-risk during review.

184 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Dominant vulnerability class with 114 fixes; recurring unbounded resource consumption (arena, queues, deserialization, type instantiation) and panics on malformed input.

Auth Bypass: Multiple bypasses in zkLogin address derivation, JWK handling, and signature scheme alignment; critical impact on transaction authorization.

Consensus Safety / Integrity: Numerous fixes for equivocation, fork recovery, state corruption, and replay; consensus safety is critical for a blockchain.