0xSimao

Founding Researcher @blackthornxyz |
@sherlockdefi watson of the year 2025 |
Founder The Contest Academy |
DM for audits

[0xSimao @0xSimao]

1/ Introducing The Mentorship Series
https://t.co/EavHXaNBXT

I’m personally mentoring a small, hand-picked group of auditors in 2026. 1st announced tmr.

3 months of 1-on-1 mentoring with me each.

Targets:
0 → 4 figures
4 → 5 figures

Step 1: Like and repost this post.

[0xSimao @0xSimao]

@SirBagoza what is extreme severity anyway 😅
the great lengths some bounty programs go in order to shoot themselves in the foot is crazy

[0xSimao @0xSimao]

@aviggiano Thanks

[0xSimao @0xSimao]

@WhiteHatMage who dis https://t.co/i6nvm0urac

[0xSimao @0xSimao]

@Kritt_AI no money

[0xSimao @0xSimao]

@only01Essential that's so cool, very nice and thanks for sharing

[0xSimao @0xSimao]

What is this Opus 5 safeguards bs, thought it only happened for fable

[0xSimao @0xSimao]

@nmirchev8 Over 10 thousand

[0xSimao @0xSimao]

10/10 design this thing has no crits

[0xSimao @0xSimao]

@contractlevel yeah it should be very good on that kind of things, there is a shares agent just for those edge cases

[0xSimao @0xSimao]

@0xCharlesWang @bailsecurity "what not to do" as an auditor right here

[0xSimao @0xSimao]

@EngrPips yep yep

[0xSimao @0xSimao]

1/ The Contest Academy - Bug Deep Dive #34 🧵

https://t.co/g7cD3WejEy

[0xSimao @0xSimao]

@EngrPips yep, very few people understand this well
to be more precise, a tick is a price, but what you read when you fetch slot0 is really just the pinned tick

[0xSimao @0xSimao]

@EngrPips no, it's a whole tick, tick only changes when the sqrtPrice reaches exactly the next tick

[0xSimao @0xSimao]

Edited the format of the blog posts, I think they are a better read now, I am going to post more of my findings since I understand them much better so the explaining is also more thorough.

Hope you enjoy it! Real Uniswap tick alpha 🤫

https://t.co/g7cD3WdLP0

[0xSimao @0xSimao]

1/ The Contest Academy - Bug Deep Dive #34 🧵

https://t.co/g7cD3WejEy

[0xSimao @0xSimao]

8/ Conclusion

This finding would earn you $3738. I wouldn't say it is difficult, but it needs you to open UniswapV3Pool.sol and read what slot0 guarantees, not what the field names suggest.

High severity, since the position is mispriced the moment it is minted.

[0xSimao @0xSimao]

7/ The result

The rebalance then reads the stale tick and centres the band on it. Price at tick -1769, band minted -1772 to -1768.

Three ticks of room below, one above, on a position that is supposed to be even on both sides. Out of range it earns nothing.