Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

gmx-io/gmx-synthetics

              main @ f1c0125
            

Fixes

CVEs

CRITICAL

Peak severity

31.6%

Coverage

Highlights

Auth Bypass: 25 prior fixes. Scrutinize any change in this area.

contracts/deposit/ExecuteDepositUtils.sol: most-fixed (8 issues). Treat as high-risk during review.

72 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Replay: The lack of domain separation, strict nonce verification, or chain ID parameters in early validation setups permitted signed messages to be replayed across different networks or execution contexts. This directly threatened user funds and protocol states via unauthorized order modifications or asset claims.

Auth Bypass: Vulnerabilities like multicall delegatecall context spoofing (ERC-2771 bypass) and incorrect EIP-712 type hash mappings allowed attackers to bypass signature validation checks entirely, leading to unauthorized order updates and routing controls.

Access Control: Bypassing authorized handlers or execution gates during GLV actions skipped essential safety checkpoints, such as maximum PnL limit checks and market validation rules, leaving the GLV system vulnerable to economic inflation and unauthorized state modifications.