Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
argentlabs/argent-contracts
develop @ 0e9bf64
37
Fixes
0
CVEs
HIGH
Peak severity
60.6%
Coverage
Highlights
Auth Bypass: 23 prior fixes. Scrutinize any change in this area.
contracts/modules/TransactionManager.sol: most-fixed (4 issues). Treat as high-risk during review.
31 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical methods, such as 'cancelGuardianRevokation', were callable through the relayer without verifying the owner's signature, allowing attackers to manipulate guardian states.
Privilege Escalation: Storage collision vulnerabilities inside the delegatecall-based wallet proxy could permit hijacking the main implementation target, leading to total wallet compromise.
Signature Replay: Deploying wallets without incorporating the target wallet's address into the signed refund hash allowed refund signatures to be replayed across different operations.