🛡️ Web3 Smart Contract Security Audits & PoC Exploit Vault

Comprehensive repository of smart contract security vulnerability assessments, mathematical invariant proofs, and executable Foundry PoC exploit test suites across major DeFi, Liquid Staking, and Cross-Chain protocols.

web3-security-audits-poc/
├── reports/
│   ├── 01_UniswapV4_Dynamic_Fee_Hooks.md
│   ├── 02_Morpho_Blue_Bad_Debt_Liquidation.md
│   ├── 03_EigenLayer_AVS_Slashing_Escalation.md
│   ├── 04_Solana_Perp_DEX_Pyth_Oracle_Anchor.md
│   └── 05_Groth16_Plonk_ZK_Verifier_Underflow.md
├── test/
│   ├── UniswapV4HooksExploit.t.sol
│   ├── MorphoVaultLiquidationExploit.t.sol
│   ├── EigenLayerSlashingExploit.t.sol
│   ├── SolanaPerpDEXInvariant.rs
│   └── Groth16VerifierExploit.t.sol
├── foundry.toml
└── README.md

Install Foundry:

curl -L https://foundry.paradigm.xyz | bash
foundryup

# Run all security exploit test suites with maximum trace verbosity
forge test -vvvv

# Run specific exploit test
forge test --match-test testUniswapV4DynamicHookExploit -vvvv
forge test --match-test testMorphoBadDebtLiquidation -vvvv
forge test --match-test testEigenLayerSlashingBypass -vvvv

• Severity: High
• Impact: Attacker can siphon accumulated swap fee reserves through manipulated tick rounding during flash swaps.
• Remediation: Enforce exact balance delta checks using transient storage (tstore) prior to fee distribution hook callback.

• Severity: High
• Impact: Positions near 100% LTV become unliquidatable when price feeds update by tiny increments, leaving protocol with permanent bad debt.
• Remediation: Use mulDivUp for collateral repayment calculation and require minimum collateral liquidation thresholds.

• Severity: High
• Impact: Malicious operator can front-run slashing transaction with undelegate call, safely withdrawing restaked ETH.
• Remediation: Implement mandatory unbonding delay locking funds until pending slashing epochs are settled.

_{Security Auditor: Mark Orning (@markorning-design) • Verified EVM: 0xF56366Ed5731A5d424e686eb594FC8982BcEbbe1}