Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
uniswap/v4-core
main @ 46c6834
16
Fixes
0
CVEs
HIGH
Peak severity
72.7%
Coverage
Highlights
Auth Bypass: 4 prior fixes. Scrutinize any change in this area.
PoolManager.sol: most-fixed (3 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Reentrancy: Nested callback execution allows callers to acquire nested locks. Historically, deficient tracking of these nested locks allowed state validation bypasses during the lock-release phase, requiring robust tracking of all currency deltas and nested lock indices before releasing execution locks.
Auth Bypass: Signature-based meta-transaction pathways contained bugs that bypassed authentication, such as using msg.sender instead of the recovered owner address during token approvals, and maintaining fallback recovery paths that weakened EIP-712 compliance.
Double Spend: Flaws in native and ERC20 token settlement sequences could lead to double-spend vulnerabilities where native token values (msg.value) or reserves are out of sync with actual settles.