Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

wormhole-foundation/wormhole

              main @ bb5957f
            

Fixes

CVEs

HIGH

Peak severity

75.0%

Coverage

Highlights

Signature Verification Bypass: 3 prior fixes. Scrutinize any change in this area.

bridge/pkg/p2p/p2p.go: most-fixed (1 issue). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authorization Bypass: 1 historical fix(es) link wormhole_chain/x/wormhole/keeper/msg_server_register_account_as_guardian.go to Authorization Bypass.

Integrity Violation: 1 historical fix(es) link solana/modules/token_bridge/program/src/api/create_wrapped.rs to Integrity Violation.

Signature Verification Bypass: 1 historical fix(es) link solana/bridge/src/vaa.rs to Signature Verification Bypass.