Research
Writeups.
Post-mortems.
From the field.
A subtle reentrancy in a flashloan path
A writeup of a finding that bypassed the standard reentrancy guard by exploiting an external call inside a flashloan callback. Walkthrough of the path, the fix, and why it was missed.
→
Three ways to drain a liquidity pool
Notes from a recent bug bounty. Three classes of bugs we found across ten Move contracts. Each one with the minimum reproduction, the impact, and the recommended patch.
→
Anatomy of a $4M signature bypass
Breaking down a real exploit. How the validator set was tricked into signing a state transition that should have been rejected. What the patch looks like and what to check in your own bridge.
→
Building a fuzzing harness in 20 lines
A minimal setup using Foundry invariants to catch state corruption bugs before they ship. Includes the harness, the targets, and a sample failure case.
→