Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

snowfork/snowbridge

              main @ 74486b1
            

Fixes

CVEs

CRITICAL

Peak severity

77.3%

Coverage

Highlights

Auth Bypass: 19 prior fixes. Scrutinize any change in this area.

contracts/src/BeefyClient.sol: most-fixed (3 issues). Treat as high-risk during review.

25 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The validator consensus verification mechanism was historically prone to multiple bypasses, including leaf index skipping in Merkle proofs, incorrect signature quorum math, and unvalidated padding bits in bitfields. This allowed potential bypasses of validator signature checks.

Auth Bypass: Inbound message channels lacked caller authorization and cryptographic verification of messages against commitment hashes, allowing arbitrary untrusted actors to directly trigger message processing.

Auth Bypass: Merkle proof parsing lacked checks on exact proof length, causing vulnerability to Merkle proof aliasing exploits against the canonical tree structure.