Selected write-up Cantina
HighRevert Finance
Native ETH removeLiquidity reentrancy lets an LP swap against withdrawn stale reserves
Kurt Landman Perth, Australia
Smart contract security research_
I review DeFi contracts, with a focus on accounting, AMMs, and oracle integrations.
01Public findings
Audit portfolioMetric
MediumFixed-E8 Pyth normalization underprices standard Base MOG/USDC and transfers 5.28% of LP principal
Metric
MediumFixed-E8 synthetic-ratio truncation lets traders take 47.83% of one-sided RSR/cbBTC LP principal
Metric
MediumPrice velocity guard can be bypassed by splitting a same-block price move
Base Azul
MediumTitle withheld. The platform has not published this finding.
Morpho Midnight
LowMidnightBundles minUnits check can pass before callback-created loss slashes received credit
02Software I build
- PolyTraderBot
- Self-hosted trading automation for Polymarket. Owner and developer.
- PolyTortoise
- Polymarket automation through Telegram.
- Svarog Launcher
- Solana token-launching and bundling software. Lead developer.
Other builds: Ink & Ivory Artistry · Bitcoin 09 (archived)
03Where I look
- Accounting & invariants
- Share math, rounding boundaries, drift across repeated operations.
- AMM & curve math
- Reserve manipulation, fee-on-transfer, behaviour at the bounds.
- Oracles & price paths
- Staleness, sequencer downtime, decimal handling.
- Access & roles
- Escalation, unrevoked approvals, missing revoke paths.
- Upgrade & lifecycle
- Initialisation, storage layout, what stays live after an incident.
- Standards conformance
- ERC-20, ERC-2612, and deviations that break interop.
04Contact
For a review, send the repository, commit range, and the areas you want checked.