Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

safe-global/safe-modules

              main @ 9e5f3d0
            

Fixes

CVEs

CRITICAL

Peak severity

81.8%

Coverage

Highlights

Authentication Bypass: 3 prior fixes. Scrutinize any change in this area.

SafeSignerLaunchpad.sol: most-fixed (3 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Signature Bypass: Multiple fixes show signed data omitted critical UserOperation fields (gas, initCode, paymasterAndData) or passed wrong payload to ERC-1271, allowing unauthorized modifications.

Authentication Bypass: Double initialization and missing ownership verification could allow account takeover; fixes added init-hash checks and signature verification for ownership.

Signature Validation Bypass: Verifier failure return values mismatched precompile behavior or vendored FCL had point-addition bugs, accepting invalid signatures.