Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

0xproject/0x-monorepo

              development @ 53b5bb1
            

130

Fixes

CVEs

CRITICAL

Peak severity

37.5%

Coverage

Highlights

Auth Bypass: 49 prior fixes. Scrutinize any change in this area.

packages/order-utils/src/signature_utils.ts: most-fixed (7 issues). Treat as high-risk during review.

91 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The delegatecall mechanism in TransformERC20 historically allowed arbitrary code execution because it did not restrict execution to trusted, registry-verified transformer addresses. Ensure any dynamic delegatecall target is derived strictly from a trusted nonce registry.

Auth Bypass: Signature verification has suffered from multiple bypasses, including unchecked fallback return values, unvalidated signature types, and missing signer verification against context-aware parameters instead of client-supplied arguments. Use getCurrentContextAddress() and strictly enforce returned magic values.

Memory Corruption: Assembly blocks used to optimize copying or scaling arrays within calldata caused severe memory corruption. This occurred due to dynamic index/offset aliasing overwriting active memory areas. Developers must isolate memory layouts and explicitly increment the free memory pointer.