hexens

@hexens

Security for those who cannot afford a mistake.

hexens.io

Joined September 2021

Following

9,186

Followers

Affiliates Replies Articles Media

Pinned
hexens
@hexens
Jul 6
1/ we found a bug in the Aptos Move VM that put up to $70B at systemic risk. type confusion at the execution layer. a ~90% success rate across hundreds of simulated runs on a 30+ validator cluster. cost to build the attack infrastructure: $3,000. Conducted by @kemmio , to our
Arbitrary Struct Hijack in Aptos Move VM
From hexens.io
hexens
@hexens
Aug 12
Audit Completed: @flipper_trade Flipper is a Solana perps aggregator routing across Adrena, Phoenix, GMTrade and Sour. We covered the position lifecycle across all four adapters, collateral vaults, oracle validation, and the liquidation and settlement flows. Wishing the team
00:00
hexens
@hexens
Aug 10
Audit Completed: @roycoprotocol We're glad to have supported Royco with a security review of a major refactor of Royco Day, their risk and liquidity transformation protocol. The update splits each market into three tranches, adding SLP (Senior Liquidity Provider) alongside
00:00
hexens
@hexens
Aug 7
An invariant that is never evaluated against a transaction is just a small projection of truth. Take one Morpho Blue market on mainnet, wstETH collateral against USDC loans. It is currently 3,381,164 USDC away from breaking its own stated invariant: borrowed assets can never
hexens
@hexens
Aug 4
Audit Completed: @thesauros_one We're glad to have supported Thesauros with a security review of their optimized Rebalancer contracts. It's an ERC4626 vault that reallocates deposits across lending providers to keep yield up. Our audit covered the withdrawal and allocation
00:00