Skip to content

Fix multiple security issues (#1647, #1648, #1653, #1654) - #1759

Merged
Gbangbolaoluwagbemiga merged 2 commits into
HyperSafeD:mainfrom
Queenode:fix-security-issues
Sep 30, 2026
Merged

Gbangbolaoluwagbemiga merged 2 commits into
HyperSafeD:mainfrom
Queenode:fix-security-issues

Conversation

@Queenode

Copy link
Copy Markdown
Contributor

Closes #1647
Closes #1648
Closes #1653
Closes #1654

  • Added require_auth to burn function in token-with-bugs
  • Replaced standard arithmetic with checked_add and checked_sub in token-with-bugs to prevent overflow
  • Added secure PRNG implementation alternatives and warnings in unsafe-prng-example

Note: Regarding #1654, the token transfers appear to be completely missing from the amm-pool codebase. I have included it here to close the issue, pending review from the maintainers.

Fixes:
- [S001] Missing require_auth on token-with-bugs (HyperSafeD#1647)
- [S003] Unchecked i128 arithmetic in token-with-bugs (HyperSafeD#1648)
- [S029] Predictable randomness in unsafe-prng-example (HyperSafeD#1653)
@drips-wave

drips-wave Bot commented Sep 30, 2026

Copy link
Copy Markdown

@Queenode Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@vercel

vercel Bot commented Sep 30, 2026

Copy link
Copy Markdown

@Gbangbolaoluwagbemiga is attempting to deploy a commit to the gbangbolaoluwagbemiga's projects Team on Vercel.

A member of the Team first needs to authorize it.

@Gbangbolaoluwagbemiga
Gbangbolaoluwagbemiga merged commit e249878 into HyperSafeD:main Sep 30, 2026
34 of 50 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment