Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

axelarnetwork/tofn

              main @ 8de4a73
            

Fixes

CVEs

HIGH

Peak severity

88.2%

Coverage

Highlights

Protocol Logic Error: 5 prior fixes. Scrutinize any change in this area.

src/protocol/gg20/sign/protocol.rs: most-fixed (4 issues). Treat as high-risk during review.

10 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographic Weakness: Multiple weaknesses in Paillier ZK proofs and key generation, including missing dlog proofs, unsafe primes, and precomputed values, enable forgery or factorization attacks.

Cryptographic Input Validation: Lack of membership checks for plaintext, ciphertext, and randomness allows protocol-level cryptographic attacks.

Cryptographic Input Validation Bypass: Deserialized scalars not checked against secp256k1 modulus, enabling protocol manipulation.