Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

AcronymFoundation/anvil-contracts

              main @ f2e5c82
            

Fixes

CVEs

HIGH

Peak severity

25.0%

Coverage

Highlights

Signature Replay: 4 prior fixes. Scrutinize any change in this area.

contracts/CollateralVault.sol: most-fixed (3 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Replay: Multiple fixes addressed replay: front-running via try-catch and EIP-712 binding. Signed allowance modifications remain a high-risk path if not fully context-bound.

Signature Replay: Per-operation nonces and cancellation were added, but any new signature-based operation must reuse the nonce mechanism to avoid cross-operation replay.

Signature Replay: Deposit approval signature with exact amount was added to prevent front-running; sibling allowance-modification signatures need equivalent protection.