fix(security): august 2026 audit fixes across runtime, codec, node and system contracts - #491

Open

dmitry123 wants to merge 32 commits into

develfrom

fix/audit-fixes-2026-aug

Commits on Aug 6, 2026

test: reproduce rwasm aggregate output growth
dmitry123
committed
ae7cd3e
chore: add graphify-out into gitignore
dmitry123
committed
698ffca
fix(codec): validate collection bodies before allocation
dmitry123
committed
5bd279c
fix(node): fail-closed genesis signature verification for built-in networks
dmitry123
committed
40cb584
fix(security): authenticate runtime-upgrade release artifacts before signing
dmitry123
committed
b2a12d9
fix(security): revoke planned upgrade authority on ownership transitions
dmitry123
committed
189449a
fix(precompile): charge EIP-7951 P256 verification gas

hedwig0x
authored and
dmitry123
committed
60c2e14
fix(fee-manager): don't allow to change owner to zero
dmitry123
committed
653954a
fix(runtime): add test covering non-charged initial memory
dmitry123
committed
561e2ba

Commits on Aug 7, 2026