Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cosmos/ics23

              master @ 7f2c2d0
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Verification Bypass: 11 prior fixes. Scrutinize any change in this area.

rust/src/verify.rs: most-fixed (10 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Verification Bypass: Multiple fixes address non-existence proof verification bypasses, including missing left/right neighbor checks, improper left-step detection, and placeholder node handling. These are high-severity because they allow acceptance of invalid proofs, undermining the library's core security guarantee.

Forged Proof / Authentication Bypass: IAVL proof prefix validation was missing, allowing forged proofs to pass. The fix added comprehensive prefix checks (height, size, version, hash ops), indicating a critical gap in validating proof structure.

Forged Proof / Authentication Bypass: Missing constraint on InnerSpec prefix lengths (MaxPrefixLength < MinPrefixLength + ChildSize) allowed forging non-existence proofs. This is a spec-level validation gap that could be exploited across all languages.