Security context

Highlights

Denial of Service: 22 prior fixes. Scrutinize any change in this area.

app/ante: most-fixed (12 issues). Treat as high-risk during review.

32 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Denial of Service: The transaction ante handler represents the primary untrusted entry point for the mempool and state machine. Unchecked integer operations, lack of panic recovery, missing gas caps, and bypassing resource-checks prior to signature verification have historically allowed attackers to exhaust node resources or trigger network-wide panics.

Auth Bypass: Bypasses in signature validation occurred when signature-verification routines skipped checks during RecheckTx, failed to enforce block-height derived signers during fork transitions, or omitted standard Msg validation decorators, leaving transactions susceptible to impersonation or tampering.

Auth Bypass: EIP-712 structured message hashing and signature verification are prone to validation failures where attackers bypass validation by setting transaction fields like 'timeout_timestamp' to fall back to legacy message schemes or exploit unchecked payloads.