Security Advisories
Vulnerabilities we’ve found and disclosed - the bug, the impact, and how we caught it, with proof.
Minting vault shares for nothing
A price-inconsistent reserve check in Uniswap v3/v4 StandardExchange vaults lets an attacker mint shares for a deposit that never happened - flash-loanable and permissionless.
IndexedEx / Down To Finance - Uniswap v3 & v4 SE vaults/A fix isn't fixed until it ships
How we caught a patched, pre-auth SQL injection still live in ProFTPD's stable release - because the fix never got backported.
ProFTPD mod_sql - numeric %{n} log-tag (stable ≤ 1.3.8)/