
Announcements
November 28, 2025What Is The Bug Deep Dive Series In the first place, check out the post on my introduction, if...November 26, 2025Since 2022, I’ve climbed from an anonymous contestant to top-2 on Sherlock and on Code4rena 90...Bug Deep Dives
November 30, 2025Read more...This issue is a bit complicated to explain standalone, so I will provide some of the required background. Essentially, the first thing to go over is the the Openzeppelin GovernorTimelockControl.sol, and how it interacts with the Timelock. As can be seen below, the governor contract calls the...November 29, 2025Read more...The Protocol Owner or Emergency Resolver cannot unilaterally invalidate an active market, which will cause a permanent lock of collateral for all market participants if the market outcome is impossible to determine (e.g., source API failure, question ambiguity, or real-world event cancellation)....November 28, 2025Read more...PositionTokens violates one of the MUST rules defined in EIP-1155. The rule states: However, in the current implementation, the URI is set to an empty string, violating this requirement. Alpha: on Sherlock, this doesn't always apply, and may be low. Read the readme to make sure, just like in...November 27, 2025Read more...When matching an order using swapping (either by matching two users or matching a user versus a market maker), a trade fee is charged. This fee is taken from the collateral amount traded. We show that, for the same desired outcome, there are two trade paths leading to them, where fee structure...

