Security Report Phase 2 for Rooch Project

[steelgeek091]

Up to now, in the second phase of Rooch Bug Bounty, we have received 2 high-level security reports and 2 medium-level security reports. We thank all security report submitters. We take code security very seriously and have made these 4 security reports public, encouraging everyone to actively participate in the security audit of Rooch codebase.

The following shows the 4 severity levels in Rooch security report ratings:

Critical-Risk Vulnerability:
No reports available

---

High-Risk Vulnerability:

1. 同时查询多个相同的 Object 导致内存快速进程耗尽 @m4sterchain
2. 字节码中对象过多导致进程内存耗尽 @m4sterchain

---

Medium-Risk Vulnerability:

1. 错误的值更新方式导致 grow_information.move 中不一致的状态 @nathanogaga118
2. 传递过大的 maxInactiveInterval 导致整数运算溢出 @baicaiyihao

---

Low-Risk Vulnerability:
No reports available