Audit Open Original ↗
Subspace Farmer
Type
Security review
Client
Subspace Network
Date
2022-09
Domain
Blockchain
Effort
2 wks
Section
Ethereum/EVM
Trail of Bits's security review of Subspace Network (Sep 2022) identified 9 issues: 1 high, 2 medium, 4 low, and 2 informational.
Findings · 9
- 1 Desktop application configuration file stored in group writable file Low
- 2 Insu cient validation of users’ reward addresses Low
- 3 Improper error handling Low
- 4 Flawed regex in the Tauri configuration Medium
- 5 Insu cient privilege separation between the front end and back end Medium
- 6 Vulnerable dependencies High
- 7 Broken error reporting link Low
- 8 Side e ects are triggered regardless of disk_farms validity Informational
- 9 Network configuration path construction is duplicated Informational
Findings extracted from the published report PDF. See the full report below for details and remediation.
Related