Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
babylonlabs-io/babylon
main @ fe3dd3e
96
Fixes
1
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Denial of Service: 45 prior fixes. Scrutinize any change in this area.
x/btcstaking: most-fixed (7 issues). Treat as high-risk during review.
69 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Issues: Poor nonce generation entropy and incomplete coordinate checks allowed private key exposure and signature bypasses in the Schnorr adaptor signature logic. Future changes to cryptographic primitives must guarantee BIP-340 compatibility and complete point comparison.
Auth Bypass: Validator modification messages continuously bypassed epoch boundary validation filters by nesting themselves within authz.MsgExec wrappers or exploiting incorrect block-height evaluations in decorators.
Denial of Service: Unchecked type assertions and missing size limits during the Marshalling/Unmarshalling of vote extensions within block preparation allowed attackers to trigger consensus-halting node panics or memory exhaustion.