Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
coreumfoundation/coreum
master @ 47b7632
16
Fixes
0
CVEs
HIGH
Peak severity
26.7%
Coverage
Highlights
Denial of Service: 9 prior fixes. Scrutinize any change in this area.
x/asset/ft/keeper/keeper.go: most-fixed (3 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unbounded big integer structures and reference amounts can trigger out-of-memory (OOM) panics and consume excessive resources. Enforcing a strict 10^50 limit is necessary to guarantee predictable state transitions.
Auth Bypass: Smart-contract WASM extensions executing during asset transfers can bypass core validation rules if they run out of order. Core fungible token rules must always be evaluated prior to calling external contracts.
Auth Bypass: Using standard Cosmos SDK multi-send mechanisms can bypass custom token module rules (such as burn rates and commissions) unless they are explicitly intercepted and enforced.