Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
reserve-protocol/protocol
master @ 879b0e9
42
Fixes
0
CVEs
HIGH
Peak severity
39.5%
Coverage
Highlights
Reentrancy: 8 prior fixes. Scrutinize any change in this area.
contracts/p1/RToken.sol: most-fixed (8 issues). Treat as high-risk during review.
31 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Reentrancy: Multiple reentrancy vectors were patched across token wrappers, mint/burn flows, and basket refresh paths; state-ordering and public subroutine exposure were the root causes.
Integer Overflow: Fixed-point arithmetic overflow in pricing and exchange-rate calculations could lead to financial exploits; fixes introduced mulDiv256 and CEIL rounding.
Access Control / Auth Bypass: Ownable replaced with RoleRegistry, msg.sender replaced with _msgSender(), and role separation added to prevent unauthorized asset registration, meta-transactions, and privilege escalation.