Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

valory-xyz/autonolas-tokenomics

              main @ af0eb6b
            

Fixes

CVEs

HIGH

Peak severity

73.9%

Coverage

Highlights

Access Control: 5 prior fixes. Scrutinize any change in this area.

contracts/Tokenomics.sol: most-fixed (6 issues). Treat as high-risk during review.

15 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Price Manipulation: Multiple fixes show the TWAP price guard was inverted, self-comparing, or fail-open, allowing flash-loan manipulation of the center price and slippage bypass.

Slippage Protection Bypass: V3 swap path lacked a TWAP-derived amountOutMinimum, enabling sandwich attacks; also an allowlist bypass could sweep V3-eligible tokens.

Incorrect Resource Allocation / Financial Loss: Token-ordering bug in collectFees could misroute and burn funds; deviation gate could be skipped on liquidity decrease.