Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
bgd-labs/aave-stk-gov-v3
main @ 0c4cb0b
13
Fixes
0
CVEs
HIGH
Peak severity
91.7%
Coverage
Highlights
Logic Error: 7 prior fixes. Scrutinize any change in this area.
src/contracts/StakedTokenV3.sol: most-fixed (10 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Logic Error: Multiple fixes address incorrect delegation power updates during transfers, allowing voting power retention or miscalculation.
Auth Bypass: Two separate fixes added access control to settleSlashing and removed a redirect parameter in stakeWithPermit, showing repeated authorization gaps.
Incorrect Calculation: Exchange rate and rounding errors in previewStake, redeem, and related functions could let users mint or redeem more than fair share.