Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

smartcontractkit/chainlink-ccip

              main @ b2c751b
            

Fixes

CVEs

HIGH

Peak severity

25.0%

Coverage

Highlights

Auth Bypass: 23 prior fixes. Scrutinize any change in this area.

chains/evm/contracts/pools/FastTransferTokenPoolAbstract.sol: most-fixed (3 issues). Treat as high-risk during review.

35 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The lack of explicit state PDA version validations allowed the processing of stale, uninitialized, or incorrect account versions during administrative operations. Ensuring strict version gating is vital to prevent unauthorized state manipulation.

Auth Bypass: Incorrect or missing seed validations in Program Derived Address (PDA) generation (e.g., in add_router and other router updates) allowed bypasses where the incorrect authority could be derived or spoofed.

Cryptographic Issues: Failing to bind the on-ramp address into the cross-chain message hashing scheme allowed for potential message replay and spoofing across different channel layouts.