Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

omni/omnibridge

              master @ c814f68
            

Fixes

CVEs

HIGH

Peak severity

50.0%

Coverage

Highlights

Access Control / Logic Flaw: 1 prior fix. Scrutinize any change in this area.

contracts/upgradeable_contracts/BasicOmnibridge.sol: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Logic Flaw / Access Control Bypass: Inverted lane sign comparison (>=0 vs >0) allowed unauthorized forwarding to destination lanes, bypassing access control.

Token Fee Handling / Accounting Bypass: Using requested transfer value instead of actual balance difference enabled value manipulation with fee-on-transfer tokens.

Access Control / Logic Flaw: Missing token deployment acknowledgment allowed unauthorized token handling; added _ackBridgedTokenDeploy and tightened registration checks.