Security context

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

src/auth/Auth.sol: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The authorization module historically allowed bypasses via self-calls and unhandled reverts on external authority contracts. Attackers could escalate privileges or bypass 'requiresAuth' guards if the contract automatically trusted its own address or if an external call reverted unexpectedly.

Auth Bypass: Approved operators or transfer recipients could retain unauthorized control over tokens post-transfer or post-burn if token approval state was not explicitly cleared, resulting in a severe authorization bypass.

Integer Overflow: Low-level assembly math operations (such as signed multiplication) are prone to silent overflow edge cases (specifically multiplying -1 by the minimum int256 value) which bypass standard Solidity compiler overflow checks.