Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ethereum-optimism/optimism

              develop @ cf2ce09
            

Fixes

CVEs

CRITICAL

Peak severity

45.7%

Coverage

Highlights

Auth Bypass: 47 prior fixes. Scrutinize any change in this area.

OVM_ExecutionManager.sol: most-fixed (8 issues). Treat as high-risk during review.

81 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Fraudulent legacy withdrawals could be migrated and executed during upgrades due to insufficient sender filtering and verification in the migration path.

Auth Bypass: Direct execution calls targeting the L2-to-L1 message passer could bypass cross-chain boundary checks, permitting spoofed cross-chain calls.

Consensus Deviation: Accepting user-initiated non-deposit transactions in fork-activation blocks causes consensus divergence between execution clients during network upgrades.