Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
grandinetech/grandine
develop @ fc2b4a4
24
Fixes
0
CVEs
HIGH
Peak severity
55.0%
Coverage
Highlights
Validation Bypass: 7 prior fixes. Scrutinize any change in this area.
fork_choice_store/src/store.rs: most-fixed (10 issues). Treat as high-risk during review.
19 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Validation Bypass: Multiple validation gaps in fork choice store allow acceptance of invalid bids, sidecars, and aggregates. Fixes corrected gas limit parent selection, dependent_root validation, KZG proof result checking, and committee index selection.
Signature Verification Bypass: Blob sidecar signature verification was bypassed via stale state, incorrect signing root, and a no-op verifier. These fixes enforce cryptographic validation before storing sidecars.
Slashing Protection Bypass: Slashing protection was bypassed by missing checks or incorrect epoch computation. Fixes moved validation into the signer and corrected epoch usage for block proposals and payload attestations.