675 63713 106 37254 13 241977 2509 54 27346
We disclosed a critical bug to Harvest Finance. The contracts in scope held a total of $6.4M in Uniswap V3 positions. The attack was found by an automated analysis that attempted to generalize the elements of the OpenZeppelin UUPS uninitialized implementation vulnerability.
We were commissioned by the Ethereum Foundation to perform an impact study of Ethereum Improvement Proposals (EIPs) 4758 and 6780 on existing contracts.
Over one-third of even the latest Ethereum smart contracts consist mostly of junk!
Received a bug bounty in Uniswap Labs' recent highly-promoted bounty program
