Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

sei-protocol/sei-chain

              main @ 2378fca
            

186

Fixes

CVEs

CRITICAL

Peak severity

22.9%

Coverage

Highlights

Denial of Service: 118 prior fixes. Scrutinize any change in this area.

evmrpc: most-fixed (12 issues). Treat as high-risk during review.

138 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The project resolved a critical vulnerability by upgrading the cosmos-sdk and incorporating the Dragonberry security fix for ICS23 proof verification, which could have allowed malicious actors to bypass cryptographic security invariants.

Denial of Service: The gRPC-Web server lacked read, write, and idle timeout limits, leaving it vulnerable to connection-exhaustion and slow-client DoS vectors.

Denial of Service: Protobuf decoding was vulnerable to heap exhaustion and panic states when deserializing untrusted, deeply nested, or excessively large message streams.