Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

matter-labs/era-contracts

              main @ ad5a478
            

Fixes

CVEs

HIGH

Peak severity

45.9%

Coverage

Highlights

Access Control: 20 prior fixes. Scrutinize any change in this area.

L1AssetRouter.sol: most-fixed (7 issues). Treat as high-risk during review.

31 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Access Control: Dominant vulnerability class (20 fixes) spanning multiple bridge components; failures allow unauthorized token operations, admin actions, or batch reverts.

Token Transfer Manipulation: Seven fixes address incorrect mint/burn values, missing allowance transfers, and assetInfo encoding collisions, enabling unauthorized token minting or burning.

Integer Overflow: Overflows in EVM emulation and nonce handling can lead to memory corruption or logic bypass; multiple fixes added bounds checks.