Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
superfluid-org/protocol-monorepo
dev @ 1e4657b
31
Fixes
0
CVEs
CRITICAL
Peak severity
31.0%
Coverage
Highlights
Auth Bypass: 14 prior fixes. Scrutinize any change in this area.
contracts/FlowAgreement.sol: most-fixed (4 issues). Treat as high-risk during review.
28 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Weak context validation allowed unauthorized actors to decode and manipulate agreement contexts. This was resolved by validating the context integrity with isCtxValid prior to decoding.
Access Control: Implementation logic contracts deployed behind proxies were vulnerable to direct initialization attacks, which could result in attackers taking ownership of the implementation. The fix introduced a 'castrate' pattern to permanently disable implementation contract initialization.
Auth Bypass: Missing permission checks allowed arbitrary users to unauthorizedly update or terminate active streams. The protocol added strict verification that the caller is either the stream sender or receiver.