Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
1inch/solana-fusion
main @ 2aab60c
7
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
native-programs/fusion-swap-native/src/validation_helpers.rs: most-fixed (3 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Two separate fixes were needed to close ATA validation gaps, indicating a persistent weakness where owner checks could be satisfied by non-ATA accounts, enabling unauthorized token access.
Auth Bypass: Inconsistent handling of native vs. SPL token source accounts allowed unauthorized fund manipulation; the fix added a consistency check between src_asset_is_native and maker_src_ata presence.
Integer Overflow: Fee subtraction used unchecked arithmetic, risking amount underflow/overflow; fixed with checked_sub. Similar patterns may exist in other fee or amount calculations.