thumbnail image
0xSimao signature
0xSimao signature
  • Home
  • Private Audits
  • Contests
  • The Contest Academy
  • Categories 
    • All Categories
    • Announcements
    • Bug Deep Dive
  • …  
    • Home
    • Private Audits
    • Contests
    • The Contest Academy
    • Categories 
      • All Categories
      • Announcements
      • Bug Deep Dive
  • Search
Get A Quote
0xsimao@gmail.com
0xSimao signature
0xSimao signature
  • Home
  • Private Audits
  • Contests
  • The Contest Academy
  • Categories 
    • All Categories
    • Announcements
    • Bug Deep Dive
  • …  
    • Home
    • Private Audits
    • Contests
    • The Contest Academy
    • Categories 
      • All Categories
      • Announcements
      • Bug Deep Dive
  • Search
Get A Quote
0xsimao@gmail.com
0xSimao signature
  • The Contest Academy

    by 0xSimao

    Reach Out
  • Announcements

    Introducing The Bug Deep Dive Series
    November 28, 2025
    What Is The Bug Deep Dive Series In the first place, check out the post on my introduction, if...
    Introducing The Contest Academy
    November 26, 2025
    Since 2022, I’ve climbed from an anonymous contestant to top-2 on Sherlock and on Code4rena 90...
  • Bug Deep Dives

    Bug Deep Dive #4
    November 30, 2025
    This issue is a bit complicated to explain standalone, so I will provide some of the required background. Essentially, the first thing to go over is the the Openzeppelin GovernorTimelockControl.sol, and how it interacts with the Timelock. As can be seen below, the governor contract calls the...
    Read more...
    Bug Deep Dive #3
    November 29, 2025
    The Protocol Owner or Emergency Resolver cannot unilaterally invalidate an active market, which will cause a permanent lock of collateral for all market participants if the market outcome is impossible to determine (e.g., source API failure, question ambiguity, or real-world event cancellation)....
    Read more...
    Bug Deep Dive #2
    November 28, 2025
    PositionTokens violates one of the MUST rules defined in EIP-1155. The rule states: However, in the current implementation, the URI is set to an empty string, violating this requirement. Alpha: on Sherlock, this doesn't always apply, and may be low. Read the readme to make sure, just like in...
    Read more...
    Bug Deep Dive #1
    November 27, 2025
    When matching an order using swapping (either by matching two users or matching a user versus a market maker), a trade fee is charged. This fee is taken from the collateral amount traded. We show that, for the same desired outcome, there are two trade paths leading to them, where fee structure...
    Read more...
    Cookie Use
    We use cookies to ensure a smooth browsing experience. By continuing we assume you accept the use of cookies.
    Learn More