Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

immunefi-team/audit-comp-quantus-apps

              audit-comp-ready @ d5fc4d6
            

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Auth Bypass: 6 prior fixes. Scrutinize any change in this area.

cold-wallet-app/lib/screens/sign_transaction_screen.dart: most-fixed (2 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multisig approvals were built from indexer-supplied inner call bytes, allowing a compromised indexer to trick co-signers into approving malicious calls; fixed by loading authoritative bytes from chain storage and requiring them in the extrinsic.

Insecure Signing / Missing Call Verification: Cold wallet could blind-sign malicious payloads without decoding and displaying all inner calls; fixed by requiring exact whole-payload decode, rejecting unknown pallets, and showing all parameters.

Auth Bypass: Process death or PIN-only devices could skip authentication entirely; fixed by failing closed on process death and gating on device security support rather than biometric availability.