Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
raydium-io/raydium-amm-v3
master @ ed7c84a
15
Fixes
0
CVEs
HIGH
Peak severity
23.1%
Coverage
Highlights
Access Control: 5 prior fixes. Scrutinize any change in this area.
programs/amm/src/util/token.rs: most-fixed (3 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple entry points for moving user tokens into pool vaults lacked token account authority, mint, and frozen checks, allowing unauthorized transfers.
Access Control: Reward collection and parameter updates were not consistently restricted to the pool owner, enabling unauthorized fund withdrawal or state manipulation.
Integer Overflow: Unchecked arithmetic in swap amount calculations, liquidity decrease fee adjustments, and inverse fee computation could be exploited to manipulate token amounts or cause financial loss.