Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
leather-io/mono
dev @ cb6f28d
34
Fixes
0
CVEs
HIGH
Peak severity
21.2%
Coverage
Highlights
Auth Bypass: 6 prior fixes. Scrutinize any change in this area.
flow: most-fixed (3 issues). Treat as high-risk during review.
25 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Transaction Signing Bypass: Multiple fixes address signing of malicious or unintended transactions due to insufficient input verification, script type misclassification, and missing input index handling.
Auth Bypass: Origin allowlist and domain binding were missing or too permissive in production, enabling unauthorized RPC requests and sign-in message forgery.
Authorization Bypass: Missing role checks and incomplete multisig detection allow unauthorized actions and single-signature signing of multisig transactions.