Highlights
Auth Bypass: 12 prior fixes. Scrutinize any change in this area.
source/contracts/reporting/Market.sol: most-fixed (2 issues). Treat as high-risk during review.
20 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple fixes address unauthorized token transfers and whitelist manipulation due to insufficient caller validation on trusted transfer and admin functions.
Access Control: Critical self-destruction authorization flaw and unsafe caller-controlled parameters in token functions indicate weak administrative access control on low-level operations.
Logic Error: Incorrect state updates, comparison operators, and missing sum checks caused supply inflation and payout misrouting, showing validation gaps in token and reporting logic.