Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

metaplex-foundation/metaplex

              master @ 4eefb4e
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

contracts: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Validation of gateway tokens was historically bypassable if the tokens were generated prior to the Candy Machine's go-live date, allowing bots to pre-solve captchas. Developers must ensure that Solana Gateway token verification checks both validity and expiration relative to the contract's live state.

Auth Bypass: An authorization gap during the initialization of the AuctionManager allowed attackers to front-run the transaction and claim unauthorized authority over a vault. State initialization functions must strictly validate the initiating authority.

Cryptographic Issues: Derivation of Program Derived Addresses (PDAs) for vaults lacked distinct seeds, which could lead to address collisions and cross-vault unauthorized access. Every PDA derivation must incorporate unique scope-limiting public keys.