Skip to content

Security: Sync Manager Payload Hardening#2971

Closed
MichaelSovereign wants to merge 111 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/sync-payload-integrity
Closed

Security: Sync Manager Payload Hardening#2971
MichaelSovereign wants to merge 111 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/sync-payload-integrity

Conversation

@MichaelSovereign
Copy link
Copy Markdown
Contributor

Summary

This PR hardens the against malformed or oversized synchronization payloads.

Changes

  1. Size Enforcement: Added a hard limit of 2,000 rows for incoming sync payloads in . This aligns with the system's fetch limits and prevents attackers from crashing nodes via massive data pushes.
  2. Type Validation: Enforced strict list-type checking for the parameter before initiating database connections.
  3. Defensive Logging: Added warning logs for rejected oversized payloads to aid in detecting potential DoS attempts.

Closes #7440

…event connectivity issues with outdated certs
…o prevent rewards from known abusive addresses
@MichaelSovereign MichaelSovereign requested a review from Scottcjn as a code owner May 2, 2026 06:17
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related tests Test suite changes size/XL PR: 500+ lines labels May 2, 2026
@Scottcjn
Copy link
Copy Markdown
Owner

Scottcjn commented May 3, 2026

Closing as part of Tier 0 hard-ban cleanup — see #3074 / #3104 / #3169 for the documented incident chain. All MichaelSovereign PRs are closed unread per the Tier 0 contract. No review path; no future PRs from this account will be processed. (See feedback_michaelsovereign_tier0_2026-05-02.md.)

@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related size/XL PR: 500+ lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants