Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
VeiloSolana/privacy-program
main @ 4958a2a
18
Fixes
0
CVEs
CRITICAL
Peak severity
46.2%
Coverage
Highlights
Access Control: 6 prior fixes. Scrutinize any change in this area.
programs/privacy-pool/src/swap.rs: most-fixed (8 issues). Treat as high-risk during review.
16 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Relayer could substitute their own claimant key into the ExtData hash committed by the ZK proof, allowing them to drain deposited funds. This is the most severe single flaw because it bypasses the core privacy/ownership model.
Authentication Bypass: transact_swap lacked ZK proof verification entirely, allowing unauthorized note spending. This is a fundamental authentication gap in the swap path.
Authorization Bypass: ZK proof verification and nullifier validation were missing, allowing nullifier reuse and fund theft. This is a critical integrity gap in the core privacy logic.