Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

keep-network/keep-core

              main @ a7ac898
            

158

Fixes

CVEs

CRITICAL

Peak severity

66.7%

Coverage

Highlights

Access Control: 30 prior fixes. Scrutinize any change in this area.

contracts/solidity/contracts/TokenStaking.sol: most-fixed (11 issues). Treat as high-risk during review.

126 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authorization Bypass: Multiple fixes address missing or incorrect authorization checks in staking operations (undelegate, cancel, slash, seize, redelegate, lockStake), allowing unauthorized token manipulation or stake manipulation.

: Signature verification is repeatedly bypassed due to missing message prefixes, wrong key usage, or hash collisions, enabling forgery and impersonation.

Cryptographic Validation Bypass: Commitment and key-share validation often uses the wrong master public key or signer ID, allowing acceptance of invalid cryptographic material.