Security context

Highlights

Auth Bypass: 39 prior fixes. Scrutinize any change in this area.

src/main/java/org/tron/core/db/Manager.java: most-fixed (9 issues). Treat as high-risk during review.

74 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Frequent logical and state-handling defects in signature verification logic allowed actors to forge or entirely skip transaction signature validation under specific conditions, such as deferred execution flags or missing checks for zero-knowledge parameters.

Auth Bypass: Account permission updates regularly suffered from flawed boundary, threshold, and structure validations—including inverted conditional logic—enabling bypasses of hierarchical multi-signature rules.

Denial of Service: Precompiled contracts validating signatures (e.g., MultiValidateSign) allowed resource exhaustion by failing to charge adequate VM energy fees relative to payload size, or by executing heavy validations without threading timeouts.