Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ebtc-protocol/ebtc
main @ bab1f39
27
Fixes
0
CVEs
CRITICAL
Peak severity
45.8%
Coverage
Highlights
Auth Bypass: 6 prior fixes. Scrutinize any change in this area.
CDPManager.sol: most-fixed (4 issues). Treat as high-risk during review.
21 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple fixes address capability burning and boolean logic in canCall, indicating a fragile authorization core where burned capabilities could be re-enabled or incorrectly granted.
Access Control: Blacklist checks were bypassed in transferFrom and later moved to the outer transfer function, showing the check placement is critical and can be missed on alternate paths.
Auth Bypass: Unauthorized burning was possible without an access check, and permit replay was addressed via nonce invalidation, highlighting both direct and signature-based auth gaps.