Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mux-world/mux-protocol
main @ 0f70a70
2
Fixes
0
CVEs
HIGH
Peak severity
0.0%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
NativeUnwrapper: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Flaws in the unwrapping of WETH to native assets within upgradeable proxy patterns can cause transfer failures or allow unauthorized fund extraction. This risk was mitigated by isolating the native asset unwrapping logic into a dedicated NativeUnwrapper contract.
Logic Bug: Insufficent input constraints on order structures allowed invalid parameter combinations. Specifically, users could set limit prices on market orders or include token IDs on opening positions, potentially causing state corruption in the OrderBook.