sudo.fl
← BACK TO OPERATIONS
CLASSIFIED

[ DEBRIEF · BLOCKCHAIN ]

ORACLE FRACTURE

Smart-contract audit of a lending protocol. Found oracle manipulation path enabling under-collateralized borrows.

// ENGAGEMENT_TIMELINE

  1. [Week 1] Architecture review + threat model for price feeds.
  2. [Week 2] Invariant suite; discovered TWAP window edge case.
  3. [Week 3] PoC fork test; report + remediation guidance delivered.

// VULNERABILITIES

  • [CRITICAL]SC-01Single-block oracle update race
  • [HIGH]SC-02Missing access control on pause helper

// TOOLS_USED

FoundrySlitherEchidnaTenderly

// OUTCOME

> Critical findings patched pre-mainnet. Added circuit breakers and multi-oracle medianization.