Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
shardeum/shardus-core
dev @ 1a76da4
37
Fixes
0
CVEs
CRITICAL
Peak severity
72.2%
Coverage
Highlights
Auth Bypass: 10 prior fixes. Scrutinize any change in this area.
src/state-manager/TransactionConsensus.ts: most-fixed (5 issues). Treat as high-risk during review.
31 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Debug endpoints have been repeatedly patched for auth bypasses, including an unsafeUnlock bypass, custom multisig verification, and replay attacks. These endpoints are high-value targets as they expose sensitive network internals.
Signature Verification Bypass: Consensus vote and receipt handling has multiple past bypasses: duplicate signatures padding the majority threshold, missing sender execution-group checks, and unverified vote hashes. Forged consensus data can corrupt network state.
Authentication Bypass: Internal binary message registration had an AND/OR logic flaw allowing messages from nodes not in the active list. This is a critical P2P path for all internal communication.