Search

A source-level and on-chain reconstruction of one of the first EIP-7702 exploits: a delegated EOA that defeats the classic flashloan guard, manipulates a PancakeSwap spot price, and inflates a staking position on BSC.

A source-level and on-chain reconstruction of the GMX V1 GLP exploit: the keeper-mediated reentrancy door, the desynced global-short accounting between Vault and ShortsTracker, and the transaction that minted GLP cheap and redeemed it inflated.

A source-level reconstruction of the Cork Protocol exploit: near-expiry HIYA manipulation, unauthenticated CorkHook.beforeSwap calls, fake market setup, and derivative redemption into wstETH.

A source-level reconstruction of the Cetus Sui CLMM exploit: a flawed u256 left-shift overflow check, undercharged add-liquidity math, and the remove-liquidity path that pulled real reserves out.

A reconstruction of the ZKsync airdrop incident: a compromised admin account, sweepUnclaimed-driven minting of 111M ZK, exchange liquidation pressure, and negotiated fund recovery.

A source-level reconstruction of the KiloEx multi-chain exploit: a MinimalForwarder trust-boundary failure, forged keeper calls, direct setPrices control, and leveraged oracle profit extraction.

A source-level and control-plane reconstruction of the UPCX exploit: a compromised privileged key, malicious ProxyAdmin upgrade, withdrawByAdmin execution, and treasury-scale token drain.

A source-level and on-chain reconstruction of the Bybit cold-wallet heist: the tampered Safe{Wallet} JavaScript, the delegatecall storage overwrite, and the full transaction trail.

An external call hands control to an attacker before state is finalized, letting them re-enter and act on stale storage.

A protocol prices assets off a manipulable source (spot AMM reserves or desynced internal state), letting an attacker forge a favorable price.

Uncollateralized, single-transaction capital amplifies another bug — usually oracle manipulation or governance — to profitable scale.

A privileged action is reachable by the wrong caller because a check is missing, wrong, or built on a broken assumption.

What is signed or verified diverges from what actually executes — via delegatecall storage overwrite, malleability, or blind signing.

Cross-chain bridges concentrate value and trust; a flawed message-verification or signer set lets an attacker forge withdrawals.

Keys or signing devices are stolen or tricked into signing, so on-chain actions are fully valid yet unauthorized.

Who is allowed to invoke a privileged action.

The net worth a pool uses to price its LP token.

Validate, update state, then call out — in that order.

Run another contract's code in your own storage context.

An account controlled by a private key, not contract code.

Integer arithmetic scaled to represent fractional values.

Uncollateralized borrowing repaid in the same transaction.

Forcing a protocol to read a false price.

The privileged controller for upgradeable proxy implementations.

Re-entering a function before its state is finalized.

A lock that blocks nested entry into protected functions.

A meta-transaction relay that appends or proves the original sender.

The original EOA that started the transaction.

Every balance/accounting write happens before ETH transfers, token hooks, or callbacks.

Apply a nonReentrant guard where control can leave the contract.

Values that must move together are updated on every path; one contract never reads a variable that another updates separately.

Use TWAPs or vetted signed feeds that cannot move within one transaction.

Reject stale rounds and values outside a plausible band.

EIP-7702 lets an EOA run code; this guard no longer implies 'not a contract'.

Per-block change limits and manipulation-resistant inputs bound the blast radius.

Minting, upgrading, withdrawing, and config changes are gated by role/owner checks.

Guard against re-init and initializer front-running in upgradeable contracts.

No blind signing; the presented payload matches on-chain execution.

Prevent foreign code from rewriting the caller's storage context.

Bind to nonce and chainId; reject malleable signature forms.

Independent, hardware-isolated signers with least privilege.

Integrity checks and dependency pinning for the signer UI and its assets.

Convert between hex and UTF-8 text (handy for calldata / bytes debugging).

Convert between mnemonics and keys (BIP39, etc.). Generate seeds and addresses.

Quick, high-level token risk checklist for honeypot signals, controls, taxes, and liquidity posture.

AI-assisted contract review workflow for call graphs, risk surfaces, and findings drafts.

Generate random or deterministic Ethereum addresses and keypairs for local testing.

Reconstruct a best-effort ABI from bytecode and selectors.