[EPIC] Security By Design #1206

Activity

1. adecaro

   added this to the Q3/25 milestone on Aug 14, 2025
2. adecaro

   self-assigned this

   on Aug 14, 2025
3. adecaro

   added

   EPICTo mark the issue as an EPCITo mark the issue as an EPCI

   on Aug 14, 2025
4. adecaro

   added a sub-issue on Aug 14, 2025

   • Double check MarshalToMessageToSign and the way the message is formed #1205
5. adecaro

   modified the milestones: Q3/25, Q4/25 on Oct 1, 2025
6. adecaro

   added sub-issues on Oct 29, 2025

   • AcceptView may expose a signing oracle #1233
   • Responders to CollectEndorsementsView may expose signing oracle #1232
   • RequestApprovalResponderView should validate proposal #1231
   • RequestApprovalResponderView misses empty rwset checks #1230
   • ttx/AcceptView should check the received transaction #1202
   • Ambiguous requirement of auditor signatures #1237
   • ttx/AcceptView should check the SignatureRequest #1201
7. adecaro

   modified the milestones: Q4/25, Q1/26 on Feb 9, 2026
8. 82 remaining items

   Load more
9. HayimShaul

   added sub-issues on Aug 3, 2026

   • identity/deserializer: unbounded recursion in the verifier multiplex on untrusted identity input #2076
   • identity/boolpolicy: parser depth cap doesn't bound the evaluator, and evaluation isn't memoized #2077
   • identity/idemix: unguarded curve-ID index in mathlib during audit-info unmarshaling #2078
10. AkramBitar

    added sub-issues on Aug 4, 2026

    • Audit metadata is not cryptographically bound to the token request anchor #2110
    • fabtoken: TransferHTLCValidate only validates InputTokens[0] for multi-input HTLC transfers #2025
    • zkatdlog: transfer validator missing the owner-verifier cache that fabtoken already has #2074
11. AkramBitar

    removed a sub-issue on Aug 4, 2026

    • zkatdlog: transfer validator missing the owner-verifier cache that fabtoken already has #2074
12. adecaro

    removed their assignment

    on Aug 13, 2026
13. AkramBitar

    added a sub-issue on Aug 13, 2026

    • tokens: typed.go ASN.1 decoders accept trailing bytes and have no fuzz target #2189
14. AkramBitar

    assigned

    AkramBitar

    and unassigned

    drucker-nir

    on Aug 13, 2026
15. AkramBitar

    added a sub-issue on Aug 24, 2026

    • Bound remaining unlimited storage reads and inputs (materialized queries, IN-clause expansion, opaque keystore writes) [MED] #1984
16. Effi-S

    unassigned

    HayimShaul

    on Sep 7, 2026
17. AkramBitar

    modified the milestones: Q3/26, Q4/26 on Oct 6, 2026