Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

idexio/idex-contracts-ikon

              main @ e87f629
            

Fixes

CVEs

HIGH

Peak severity

57.1%

Coverage

Highlights

Access Control: 3 prior fixes. Scrutinize any change in this area.

contracts/libraries/AcquisitionDeleveraging.sol: most-fixed (2 issues). Treat as high-risk during review.

13 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Access Control Bypass: Multiple high-severity bypasses in liquidation and bridge withdrawal paths allow unauthorized operations, including liquidating protected wallets and processing unverified cross-chain messages.

Signature Verification: Two separate fixes migrated hashing to EIP-712 to prevent signature malleability and delegated-key authorization bypasses, indicating a systemic weakness in legacy hashing.

Replay Attack: Stale orders could be replayed due to missing nonce invalidation and incorrect delegated key expiration, undermining trade integrity.