Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cashubtc/nutshell

              main @ ba2e8a4
            

Fixes

CVEs

HIGH

Peak severity

48.0%

Coverage

Highlights

Auth Bypass: 6 prior fixes. Scrutinize any change in this area.

cashu/mint/conditions.py: most-fixed (6 issues). Treat as high-risk during review.

23 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Bypass: Multiple fixes target P2PK/HTLC signature verification, indicating a fragile area where attackers can bypass multi-sig requirements via case, serialization, or message tampering.

Auth Bypass: JWT authentication had two consecutive fixes (audience and azp validation), showing a history of incomplete token validation that could allow cross-client access.

Race Condition / Double Spend: Three fixes address race conditions in minting/melting, including moving spent-proof checks inside DB locks and committing PENDING state, indicating concurrency is a persistent risk for double-spend.