Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
kaspanet/rusty-kaspa
master @ 01b532e
51
Fixes
0
CVEs
CRITICAL
Peak severity
25.0%
Coverage
Highlights
Denial of Service: 18 prior fixes. Scrutinize any change in this area.
consensus/src/processes/pruning_proof/mod.rs: most-fixed (3 issues). Treat as high-risk during review.
25 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Coinbase transactions were accepted into the mempool, allowing invalid transactions to be processed and potentially corrupting consensus state.
ZK Proof Verification Bypass: Control ID consistency check missing in receipt verification; a mismatched control_id could bypass proof validation.
Denial of Service: Hash opcodes were unpriced, allowing CPU-bound DoS via hash-heavy transactions; fixed by pricing per byte.