DEV Community

Daniel profile picture

Daniel

Web3 security researcher focused on smart contract vulnerabilities, protocol economics, and reproducible proof of concept development. I publish practical writeups on real findings, exploit paths.

Joined Joined on 
How a Constructor Bypass Let Malicious CROSS Makers Block Native Pair Matching

How a Constructor Bypass Let Malicious CROSS Makers Block Native Pair Matching

Comments
8 min read
How a Positive offsetSeconds Bug Let a CROSS Forge Mint Twice the Intended ERC20 Period Limit

How a Positive offsetSeconds Bug Let a CROSS Forge Mint Twice the Intended ERC20 Period Limit

Comments
6 min read
How Double Subtracting cash_reserve Reopened Full CurrentSui Markets and Diverted Liquidity Mining Rewards

How Double Subtracting cash_reserve Reopened Full CurrentSui Markets and Diverted Liquidity Mining Rewards

Comments
7 min read
How an Expired CurrentSui Reward Pool Could Refund Yield Borrowers Had Already Earned

How an Expired CurrentSui Reward Pool Could Refund Yield Borrowers Had Already Earned

Comments
7 min read
How a 1 USDC Position Let an Attacker Withdraw 800 USDC From Fluid MoneyMarket’s Shared Liquidity

How a 1 USDC Position Let an Attacker Withdraw 800 USDC From Fluid MoneyMarket’s Shared Liquidity

Comments
7 min read
How Transaction-Scoped 0xMarkets Oracle Prices Could Freeze CarthaVault After GM Settlement

How Transaction-Scoped 0xMarkets Oracle Prices Could Freeze CarthaVault After GM Settlement

Comments
10 min read
How Successful 0xMarkets Requests Could Permanently Orphan Users’ WNT Execution Fees

How Successful 0xMarkets Requests Could Permanently Orphan Users’ WNT Execution Fees

Comments
10 min read
How Permissionless Pyth Lazer Calls Could Drain 0xMarkets’ Oracle Fee Balance and Break Price Updates

How Permissionless Pyth Lazer Calls Could Drain 0xMarkets’ Oracle Fee Balance and Break Price Updates

Comments
8 min read
How Integer-Truncated Vote Weights Could Lock WEMIX Governance for Seven Days

How Integer-Truncated Vote Weights Could Lock WEMIX Governance for Seven Days

Comments
10 min read
How a MinStaking Increase Could Make an Understaked WEMIX NCP Unremovable

How a MinStaking Increase Could Make an Understaked WEMIX NCP Unremovable

Comments
11 min read
How Unsolicited EtcdCluster Packets Could Stall or Redirect WEMIX Mining Coordination

How Unsolicited EtcdCluster Packets Could Stall or Redirect WEMIX Mining Coordination

Comments
11 min read
How Unsigned Partner Metadata Could Make WEMIX Block Producers Build Invalid Blocks

How Unsigned Partner Metadata Could Make WEMIX Block Producers Build Invalid Blocks

Comments
12 min read
How WEMIX NCP Removal Skipped the Exit Path and Froze Delegated Reserves

How WEMIX NCP Removal Skipped the Exit Path and Froze Delegated Reserves

Comments
10 min read
How a Second NCP Exit Orphaned Unclaimed Withdrawal Reserves in WEMIX

How a Second NCP Exit Orphaned Unclaimed Withdrawal Reserves in WEMIX

Comments
10 min read
How Canonical Governance Reads Made WEMIX SPoA Reorg Validation Branch-Dependent

How Canonical Governance Reads Made WEMIX SPoA Reorg Validation Branch-Dependent

Comments
11 min read
How WEMIX SPoA Accepted Mutated Block Headers Under an Unchanged Validator Signature

How WEMIX SPoA Accepted Mutated Block Headers Under an Unchanged Validator Signature

Comments
10 min read
How an Arbitrary ERC20 Drained Native WEMIX From WeswapZapIn

How an Arbitrary ERC20 Drained Native WEMIX From WeswapZapIn

Comments
10 min read
How WEMIX Kept Accepting a Removed Validator as an Active Signer

How WEMIX Kept Accepting a Removed Validator as an Active Signer

Comments
10 min read
How Unbounded Borrower Preferences Could Make Rujira Liquidations Economically Impossible

How Unbounded Borrower Preferences Could Make Rujira Liquidations Economically Impossible

Comments
11 min read
How Rujira’s Slippage Guard Could Become a Hidden Liquidation Bonus

How Rujira’s Slippage Guard Could Become a Hidden Liquidation Bonus

Comments
9 min read
How a Borrower-Controlled Repay Preference Could Brick Rujira Liquidations

How a Borrower-Controlled Repay Preference Could Brick Rujira Liquidations

Comments
9 min read
How Repay Clamping Created Permanent Dust Debt in Rujira Ghost Vault

How Repay Clamping Created Permanent Dust Debt in Rujira Ghost Vault

Comments
9 min read
How Zero Adjusted Collateral Could DoS Rujira Credit Queries and Liquidations

How Zero Adjusted Collateral Could DoS Rujira Credit Queries and Liquidations

Comments
9 min read
How Share Rounding Let a Rujira Borrower Take 2 Tokens With a Limit of 1

How Share Rounding Let a Rujira Borrower Take 2 Tokens With a Limit of 1

Comments
8 min read
How a Reinitializable BuilderWallet Let Anyone Steal Builder Fees

How a Reinitializable BuilderWallet Let Anyone Steal Builder Fees

Comments
7 min read
How a Zero-Liquidity Flash Swap Crossed Momentum Ticks for Free and Stalled Rewards

How a Zero-Liquidity Flash Swap Crossed Momentum Ticks for Free and Stalled Rewards

Comments
11 min read
How a Base-Denom Collision Let Untrusted IBC Vouchers Drain ZIGChain's Native Reserves

How a Base-Denom Collision Let Untrusted IBC Vouchers Drain ZIGChain's Native Reserves

Comments
8 min read
How Overlayer's Destination-Local Counter Permanently Stranded First Inbound Transfers

How Overlayer's Destination-Local Counter Permanently Stranded First Inbound Transfers

Comments
8 min read
How a 1e12 Decimal Mismatch Let Existing LPs Capture Later Deposits

How a 1e12 Decimal Mismatch Let Existing LPs Capture Later Deposits

Comments
8 min read
How Transferred CarthaVault Shares Became Permanently Unredeemable

How Transferred CarthaVault Shares Became Permanently Unredeemable

Comments
8 min read
How a Wrong WNT Receiver Broke CarthaVault's Nonzero Execution Fee Paths

How a Wrong WNT Receiver Broke CarthaVault's Nonzero Execution Fee Paths

Comments
8 min read
How Pending 0xMarkets Requests Enabled Share Inflation in CarthaVault

How Pending 0xMarkets Requests Enabled Share Inflation in CarthaVault

Comments
9 min read
How WNT Collateral Orders Let Subaccounts Claim Execution Fees They Never Paid

How WNT Collateral Orders Let Subaccounts Claim Execution Fees They Never Paid

Comments
9 min read
How Stale GLV Share Pricing Allowed New Depositors to Capture Pending Insurance Recapitalization

How Stale GLV Share Pricing Allowed New Depositors to Capture Pending Insurance Recapitalization

1
Comments
11 min read
loading...