Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Consensys/linea-monorepo

              main @ bf4aa77
            

Fixes

CVEs

CRITICAL

Peak severity

52.9%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

contracts/contracts/tokenBridge/TokenBridge.sol: most-fixed (3 issues). Treat as high-risk during review.

31 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Soundness/Proof Forgery: Multiple independent soundness holes in the proving stack could allow a malicious prover to forge or submit invalid proofs, directly undermining the rollup's integrity. Fixes span FRI verification, multiset hash overflow, ECDSA activation, pairing handling, and circuit setup consistency.

Authentication/Authorization Bypass: Smart contract and sequencer components had multiple auth bypasses: missing validation in initializers, missing allowance checks, fallback operator role loss, and unauthorized signer creation. These could lead to loss of funds or unauthorized control.

Supply Chain / CI-CD: CI/CD pipelines and container builds used long-lived credentials, mutable action tags, and checked out untrusted fork code, enabling supply-chain attacks and secret theft.