Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

pushchain/push-chain-evm

              main @ b8d5ed7
            

Fixes

CVEs

HIGH

Peak severity

29.4%

Coverage

Highlights

Auth Bypass: 7 prior fixes. Scrutinize any change in this area.

ante/evm/05_signature_verification.go: most-fixed (3 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple historical fixes in this component show repeated weaknesses in transaction sender and chain-ID validation, enabling unauthorized execution and replay attacks.

Auth Bypass: Missing authority validation allowed unauthorized parameter updates and ERC20 registrations; fixed by enforcing consensus AuthorityParams.

Access Control Bypass: Case-sensitive address comparison in permissioned/permissionless checks allowed bypass with differently-cased addresses.