Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
immunefi-team/audit-comp-quantus-chain
audit-comp-ready @ 3b243b8
9
Fixes
0
CVEs
HIGH
Peak severity
16.7%
Coverage
Highlights
Auth Bypass: 6 prior fixes. Scrutinize any change in this area.
pallets/reversible-transfers/src/lib.rs: most-fixed (2 issues). Treat as high-risk during review.
9 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Composite utility dispatchables escaped the high-security whitelist, allowing unauthorized privileged calls via nested dispatch.
: Recovery could dispatch non-whitelisted calls on behalf of high-security accounts, bypassing the whitelist through recovered origin.
Auth Bypass: Multisig approvals were not bound to the exact inner call payload, allowing approval of unintended calls.