Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

connext/monorepo

              main @ 7758e62
            

Fixes

CVEs

CRITICAL

Peak severity

38.2%

Coverage

Highlights

Auth Bypass: 24 prior fixes. Scrutinize any change in this area.

packages/deployments/contracts/contracts/core/connext/facets/TokenFacet.sol: most-fixed (8 issues). Treat as high-risk during review.

49 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The RelayerProxy and associated facets exhibited multiple authorization gaps, including missing proposer signature verifications and a critical logical inversion in duplicate relayer validation, allowing potential state manipulation of cross-chain roots.

Replay Attack: Signatures used to propose aggregate roots lacked chain-specific identifiers, block-level nonces, and destination domain parameters, making them vulnerable to cross-chain replays.

Access Control: Critical token configurations, representation deployments, and asset removals were improperly restricted or suffered from inaccurate state tracking pointers, which could lead to state corruption and orphaned assets.