Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
uniswap/v2-core
master @ 6a9e7c9
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
contracts/token/ERC20.sol: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Flaws in cryptographic permit/approve logic can allow attackers to bypass authorization checks. If the contract mistakenly registers allowances for msg.sender instead of the recovered cryptographic signer, it permits unauthorized spending of user funds.
Logic Error: Interacting with non-standard ERC20 tokens that do not return boolean values, or return false instead of reverting on failure, can lead to silent transfer failures. Without explicit verification of the return data and call success, the protocol may proceed as if a transfer succeeded when it actually failed.