Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

roycoprotocol/royco-day

              main @ 107a5dd
            

Fixes

CVEs

CRITICAL

Peak severity

44.4%

Coverage

Highlights

Access Control: 5 prior fixes. Scrutinize any change in this area.

script/Deploy.s.sol: most-fixed (2 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation: Factory allowed templates to grant ADMIN_ROLE and call AccessManager directly, enabling full protocol takeover.

Access Control Bypass: Minting to another party skipped Maple's transfer permission validation, allowing unauthorized share creation.

Access Control: Whitelist check was moved out of kernel-specific hook, allowing unauthorized LP transfers.