Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
centrifuge/liquidity-pools
main @ e556c1a
12
Fixes
0
CVEs
HIGH
Peak severity
45.5%
Coverage
Highlights
Access Control: 11 prior fixes. Scrutinize any change in this area.
src/Connector.sol: most-fixed (2 issues). Treat as high-risk during review.
11 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Access Control: Multiple fixes were needed to properly gate deposit, redeem, and withdraw operations; initial checks were incomplete, allowing unauthorized access to user funds.
Access Control: Redeem flow used transferFrom without proper authorization, and restriction checks were insufficient (hasMember vs checkTransferRestriction), enabling unauthorized redemptions.
Access Control: Restricted token transfer and mint functions lacked member checks, allowing unauthorized transfers and mints.