strangelove-ventures / wormhole

SL fork for wormhole dev work.
https://wormhole.com
Other
1 stars 0 forks source link

enumerate which upgrades are urgent (e.g., from a security perspective), and which are nice-to-have #45

Closed jonathanpberger closed 2 months ago

jonathanpberger commented 3 months ago
### Todo
- [x] do intial slew of research
- [x] show it
- [ ] make any changes
### Notable upgrade advisories
- [ ] infinite fee grant bug
jonathanpberger commented 2 months ago

@pharr117 pls link to the report in this ticket (and ensure permissions on the report are sufficiently locked-down to the appropriate parties) and then we can close this ticket

jonathanpberger commented 2 months ago

All the issues @pharr117 found had been known and triages; no new urgent upgrades. Gonna attach a pointer to the report and close out this ticket.

pharr117 commented 2 months ago

The report pointer is in the Strangelove internal private repo issues for privacy reasons. See this issue here for the pointer: https://github.com/strangelove-ventures/engineering-internal/issues/134