Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

informalsystems/malachite

              main @ bcac2b2
            

Fixes

CVEs

HIGH

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 7 prior fixes. Scrutinize any change in this area.

code/crates/engine/src/consensus.rs: most-fixed (2 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Bypassing commit certificate validation permits malicious or unverified consensus states to propagate to the application. Ensuring complete cryptographic validation of validator signatures and strict quorum threshold verification is vital to consensus integrity.

Auth Bypass: Validating votes and proposals against the current local driver height instead of the specific message height creates a security window where historical or future validator sets are incorrectly trusted or ignored.

Denial of Service: The use of raw arithmetic operators in consensus vote calculations allows integer overflows, causing silent failures or panics during voting power threshold evaluations.