Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
threshold-network/tbtc-v2
main @ 2ef6ac6
35
Fixes
0
CVEs
CRITICAL
Peak severity
45.2%
Coverage
Highlights
Authorization Bypass: 8 prior fixes. Scrutinize any change in this area.
solidity/contracts/bridge/Bridge.sol: most-fixed (4 issues). Treat as high-risk during review.
27 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Authorization Bypass: Multiple fixes address authorization gaps in wallet proposal submission and deposit funding validation, indicating a high-risk area where unauthorized actors could submit or manipulate proposals.
Auth Bypass: Redemption paths had spoofing and unauthorized veto vulnerabilities, both fixed by adding caller binding and watchtower checks, showing a recurring need to enforce caller identity.
Access Control: Bridge contract had critical initialization and SPV proof authorization issues, requiring both implementation protection and role-based access control on proof submission.