Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
starkware-libs/sequencer
main @ 5a98bd1
185
Fixes
0
CVEs
HIGH
Peak severity
26.9%
Coverage
Highlights
Denial of Service: 109 prior fixes. Scrutinize any change in this area.
crates/blockifier/src/execution/entry_point.rs: most-fixed (15 issues). Treat as high-risk during review.
130 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unbounded call recursion depths and missing step execution limits repeatedly lead to stack exhaustion and panic crashes during contract execution in the blockifier VM. Implementing strict, configurable limits on recursion and execution steps is critical to preventing targeted DoS attacks from malicious smart contracts.
Sandbox Escape: Vulnerabilities in VM execution finalization allowed smart contracts to bypass validation checks by manipulating memory segments (such as the syscall pointer segment, implicit arguments, or builtin runner final stack pointers). Rigid post-execution layout checks are necessary to maintain sandbox integrity.
Auth Bypass: Direct calls to standard entry point execution hooks (like __execute__) and unauthorized system calls (like get_class_hash_at) were allowed during transaction validation mode. Enforcing execution mode restrictions is crucial to prevent accounts from bypassing protocol-level verification logic.