Issues

• [Security] Bridge accepts 1-confirmation SPV proofs everywhere — no minimum Bitcoin confirmation depth on peg-in mint or peg-out finalization

  GOATNetwork/bitvm-node#475 · Filter by author jisunn17 opened on Oct 1, 2026

• [Bridge Smart Contract] initWithdraw() lacks operator identity check — front-run locks depositor's pegin UTXO with no recovery path

  GOATNetwork/bitvm-node#474 · Filter by author heraldi opened on Sep 21, 2026
  1

• [Security] covenantV1 withdrawalTimeLockTransaction missing psbt.setVersion(2), bypassing CSV timelock and enabling immediate fund theft

  GOATNetwork/bitvm-node#472 · Filter by author HusseinAdeiza opened on Sep 17, 2026
  1

• [Security] PegOutGraph n_of_n_presigned set true after single verifier signs all txs, defeating n-of-n committee authorization

  GOATNetwork/bitvm-node#471 · Filter by author HusseinAdeiza opened on Sep 17, 2026
  1

• [Security] L2 Gateway requires GUARDIAN_CONNECTOR_VOUT=4 but GC-V2 L1 graphs spend the kickoff guardian connector at vout 3 - every QuickChallenge/ChallengeIncompleteKickoff disprove reverts TxidMismatch

  GOATNetwork/bitvm-node#470 · Filter by author HusseinAdeiza opened on Sep 16, 2026

• [Security] fetch_history_events tight-loops without sleep when from_height exceeds indexer finalized height (CPU spin until restart)

  GOATNetwork/bitvm-node#468 · Filter by author byfor8 opened on Sep 15, 2026

• [Security] detect_init_withdraw_call latches InitWithdraw to Processed with no KickoffReady when find_graph fails (withdrawal stuck, no retry)

  GOATNetwork/bitvm-node#467 · Filter by author byfor8 opened on Sep 15, 2026

• [Security] History catchup spawns concurrent fetch_history_events tasks before Syncing is set, racing the Gateway event cursor (state desync)

  GOATNetwork/bitvm-node#466 · Filter by author byfor8 opened on Sep 14, 2026

• [Security] Sticky Processed on InitWithdraw goat_tx_record permanently blocks re-initiated withdrawals after user cancel (fund lock-up)

  GOATNetwork/bitvm-node#465 · Filter by author byfor8 opened on Sep 14, 2026

• [Security] instance_answers_monitor overwrites a live peg-in instance with a blank UserDiscarded stub via unguarded upsert_instance (DoS / state corruption)

  GOATNetwork/bitvm-node#464 · Filter by author byfor8 opened on Sep 14, 2026

• KickoffReady permanently dropped when previous-graph row is missing from local DB — withdrawal stuck forever with no re-trigger path

  GOATNetwork/bitvm-node#462 · Filter by author dupint opened on Sep 11, 2026

• Bounty Migrated

  GOATNetwork/bitvm-node#457 · Filter by author SuperSmile0426 opened on Sep 5, 2026
  1

• Predictable bridge-out instance IDs let any caller permanently wedge the committee watcher's bridge-out cursor

  GOATNetwork/bitvm-node#448 · Filter by author mr-hrydarie opened on Aug 24, 2026
  1

• Auth signature does not bind method, path, or body — LOW/MEDIUM

  GOATNetwork/bitvm-node#447 · Filter by author DQiash opened on Aug 24, 2026
  1

• CORS wildcard and public Prometheus metrics — LOW

  GOATNetwork/bitvm-node#446 · Filter by author DQiash opened on Aug 24, 2026

• Unauthenticated data disclosure on the Bridge State Machine (API) — MEDIUM

  GOATNetwork/bitvm-node#445 · Filter by author DQiash opened on Aug 24, 2026

• Unauthenticated state write on the Bridge State Machine (API) — MEDIUM

  GOATNetwork/bitvm-node#444 · Filter by author DQiash opened on Aug 24, 2026

• [Security] finishWithdrawDisproved pays fixed rewards uncapped by actual slash; empty pool reverts entire disprove flow (DoS)

  GOATNetwork/bitvm-node#438 · Filter by author cilokesteh opened on Aug 21, 2026
  1

• [Security] Committee signature replay across deployments: updateOwners digest lacks contract-address & chain-id binding

  GOATNetwork/bitvm-node#437 · Filter by author cilokesteh opened on Aug 21, 2026

• [Security] bridge-out CLI submits LP claimData without binding --btc-address/--amount

  GOATNetwork/bitvm-node#436 · Filter by author byfor8 opened on Aug 21, 2026
  1

• [Security] detect_kickoff only watches one OperatorDataPushed graph per operator (unauthorized Take1)

  GOATNetwork/bitvm-node#431 · Filter by author byfor8 opened on Aug 19, 2026
  4

• [Security] Unauthenticated PUTs persist and overwrite BitVM3 instance state

  GOATNetwork/bitvm-node#428 · Filter by author byfor8 opened on Aug 19, 2026

• Fix total_time_to_proof

  GOATNetwork/bitvm-node#366 · Filter by author eigmax opened on Jan 24, 2026

• Patch Bitcoin and crypto-bigint in circuit's guest program

  GOATNetwork/bitvm-node#287 · Filter by author eigmax opened on Dec 23, 2025