Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hiero-ledger/hiero-consensus-node
main @ 6de8a45
198
Fixes
0
CVEs
HIGH
Peak severity
20.5%
Coverage
Highlights
Auth Bypass: 108 prior fixes. Scrutinize any change in this area.
hedera-node: most-fixed (51 issues). Treat as high-risk during review.
112 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Allowances and delegations often bypass standard signature checks if delegating spenders can grant 'approveForAll' privileges, or if hollow and deleted accounts are not strictly validated prior to executing operations.
Auth Bypass: Contract system calls and precompile executions (such as ERC-20/ERC-721 transfer implementations) fail to verify active state tracking ledgers or skip message frame sender validations, leading to signature bypasses during delegate calls.
Denial of Service: Lack of strict validation on resource quotas, gas limits, and incoming transaction schemas can cause unhandled exceptions, integer overflows, or infinite recursion loops that halt consensus.