Search results

Cross-chain revnets can leak value via local-only sucker prepare cash-outs

Status: Open.

#159 In Bananapus/version-6;

· livid opened on May 28, 2026

[Audit] Summary — Fresh Nemesis project handles src+script

Status: Open.

#156 In Bananapus/version-6;

· mejango opened on May 25, 2026

[Audit] [MEDIUM] Project handles can return verified handles with unblocked invisible Unicode controls

Status: Open.

#155 In Bananapus/version-6;

· mejango opened on May 25, 2026

[Audit] Summary - Nemesis Defifa lifecycle/state audit

audit

Status: Open.

#149 In Bananapus/version-6;

· mejango opened on May 18, 2026

[Audit] [MEDIUM] Zero-timeout Defifa games can lock if only one tier participates

audit

Status: Open.

#148 In Bananapus/version-6;

· mejango opened on May 18, 2026

[Medium] Zero-balance snapshots are treated as uninitialized, so the same round can be snapshotted twice

Status: Open.

#119 In Bananapus/version-6;

· Odhiambo526 opened on May 9, 2026

[Audit] [MEDIUM] Fee project deployer can accept mismatched canonical revnet config

Status: Open.

#101 In Bananapus/version-6;

· mejango opened on May 5, 2026

[Audit] [MEDIUM] deploy-all verifier does not prove primary native terminal wiring for CPN REV or BAN

Status: Open.

#99 In Bananapus/version-6;

· mejango opened on Apr 29, 2026

[Audit] [MEDIUM] deploy-all verifier can pass while mandatory components and ownership checks are skipped

Status: Open.

#98 In Bananapus/version-6;

· mejango opened on Apr 29, 2026

[Audit] Round 7 Summary — Aggressive exploitation: Forge POCs, Codex second opinion, line-by-line traces

Status: Open.

#88 In Bananapus/version-6;

· mejango opened on Apr 22, 2026

[Audit] Round 6 Summary — Deep-dive on REVLoans, suckers, UniV4, reentrancy, permissions, decimals, 721/banny

Status: Open.

#87 In Bananapus/version-6;

· mejango opened on Apr 22, 2026

Round 5 Audit Summary — Deep curiosity audit with fresh codebase

Status: Open.

#86 In Bananapus/version-6;

· mejango opened on Apr 21, 2026