Highlights
Auth Bypass: 6 prior fixes. Scrutinize any change in this area.
pallets/amm/src/lib.rs: most-fixed (3 issues). Treat as high-risk during review.
14 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Global fee-payer override allowed unsigned dispatch, bypassing authorization entirely.
Auth Bypass: Intent resolution could skip limit and deadline checks, enabling malicious swaps.
Sandbox Escape: Unrestricted EVM contract creation allowed unwhitelisted deployments.