Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
XterioTech/xt-contracts
main @ 4959a1c
11
Fixes
0
CVEs
HIGH
Peak severity
62.5%
Coverage
Highlights
Access Control: 7 prior fixes. Scrutinize any change in this area.
contracts/airdrop/WhitelistClaim.sol: most-fixed (3 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Access Control: Multiple fixes tightened role requirements for privileged operations, indicating a pattern of overly permissive access control on gateway management functions.
Auth Bypass: Signature-based claims lacked both deadline enforcement and ERC-1271 verification for contract beneficiaries, allowing expired or spoofed signatures.
Access Control: withdrawTo allowed arbitrary fund withdrawal without role restriction, requiring admin-only access control.