Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
safe-fndn/safe-smart-account
main @ 77901a5
29
Fixes
0
CVEs
CRITICAL
Peak severity
28.6%
Coverage
Highlights
Auth Bypass: 8 prior fixes. Scrutinize any change in this area.
contracts/GnosisSafe.sol: most-fixed (7 issues). Treat as high-risk during review.
22 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Uninitialized state in master copy singleton templates allowed unauthorized takeovers. Additionally, the sentinel address (0x1) could be incorrectly recognized as a valid owner or module, bypassing the signature threshold checks.
Auth Bypass: Weaknesses in EIP-1271 signature validation allowed callers to bypass signature thresholds by failing to enforce explicit executor parameters or passing incorrect payload hashes (raw data instead of hashed pre-images).
Memory Corruption: Optimized low-level assembly blocks failed to properly update the free memory pointer during dynamic return data copy and used incorrect padding calculations, corrupting the EVM memory space.