Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
peaqnetwork/peaq-network-node
dev @ eadd8cb
2
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Access Control: 1 prior fix. Scrutinize any change in this area.
runtime: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Access Control: The ERC20 balance precompile configuration permitted dangerous delegate calls, potentially allowing attackers to execute arbitrary code in the context of the precompile. This was mitigated by restricting the call permissions.
Auth Bypass: An insecure default existential deposit configuration in pallet-balances created a viable replay-attack vector, which required explicit zero existential deposit configuration changes across the project's runtimes.