Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
money-on-chain/stable-protocol-core-v2
master @ d770477
10
Fixes
0
CVEs
HIGH
Peak severity
60.0%
Coverage
Highlights
Access Control Bypass: 3 prior fixes. Scrutinize any change in this area.
contracts/tokens/MocRC20.sol: most-fixed (3 issues). Treat as high-risk during review.
9 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Access Control Bypass: addPeggedToken was directly callable without governance restriction, allowing unauthorized token additions.
Access Control Bypass: Changer template failed to validate that MocCore holds all roles and governor matches, enabling privilege escalation via malicious pegged tokens.
Access Control Bypass: addAsset lacked governance authorization, allowing unauthorized asset additions.