Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

hyle-team/zano

              master @ 8a7aa83
            

Fixes

CVEs

CRITICAL

Peak severity

12.5%

Coverage

Highlights

Consensus Bypass: 10 prior fixes. Scrutinize any change in this area.

src/currency_core/blockchain_storage.cpp: most-fixed (25 issues). Treat as high-risk during review.

40 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Consensus Bypass: Most frequent class; multiple fixes address hardfork-gated checks being skipped on alternative chain blocks or using wrong height/timestamp, allowing invalid blocks to be accepted.

Signature Verification Bypass: Multiple fixes to Zarcanum proof verification (challenge consistency, message binding, parameter validation) indicate a history of forgery-prone signature checks.

Auth Bypass: Gateway RPC methods lacked null secret key checks and admin API gating, allowing unauthorized privileged operations.