Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
cosmos/evm
main @ 4ab7ba4
20
Fixes
0
CVEs
HIGH
Peak severity
31.6%
Coverage
Highlights
Denial of Service: 12 prior fixes. Scrutinize any change in this area.
ante/evm: most-fixed (3 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: The EVM ante handler contains multiple critical validation oversights, including unhandled nil fees/tips, missing EIP-2681 nonce overflow checks, and gaps in txpool alignment, all of which present high risk of remote-node panics or unvalidated transaction ingestion.
Auth Bypass: Missing ownership validation in precompiled smart contracts allowed unauthorized proxy-call execution of distribution functions like reward withdrawals.
Denial of Service: Concurrency issues, TOCTOU race conditions, and lack of read/write locks in shared state make the transaction queue and mempool components highly vulnerable to remote exploitation and resource exhaustion.