Either 1) you make decisions and make things happen, or 2) decisions will get made for you, and they will happen to you.
Turns out, if you make intentional decisions and make things happen, you tend to get something that's much closer to what you really want...
@gabson0x You are correct but these sherlock guys are amazing. Do you know that for about 2 years now , none of the four have lost a contest they headed. And you are telling me that a codebase of 1700 solcs ,written by morpho,audited by these guys and you found 7 bugs in some hours?
Now, This inverted rounding made nextSqrtP from calcFinalPrice slightly exceed the tick boundary, and then calcReachAmount concluded and thinks the threshold was not reached. And then the fund drainage begins.
We distilled you logics and cover edge cases. Just a DM ..,
while calcReachAmount() function determines the input needed to hit the next tick boundary, and calcFinalPrice() derives the price given the actual input. Then both depend on estimateIncrementalLiquidity() for fee-based deltaL, which rounds down.
This is just the close summary of kyberswap attack. Difference perser issue.
The Elastic's computeSwapStep() function calls two functions that each compute a price from swap parameters:
@seunlanlege@HackenProof@hyperbridge You have very bad advisers. Or is it your ego?. You somehow believed you code is still bug free and you went straight to bug bounty instead of during public contest . Now you will keep on paying more. Well, good for us the Sr.
@Harvesto12 They didnt because, SR dont rub shoulder with each other. They go toe to toe with attackers . And ,That is every SR end goal, to minimal attackers impact. Go hit critical on immunfi or hackenproof. Rub shoulder with attackers not your follow SR.
To be honest, it is depressing what is happening right now. The past couple of months have been crazy. Too many hacks; it drains me mentally. Not sure how you guys cope, but I’m thinking about the amount of funds lost… this field is not going to recover anytime soon; it’s impossible. Everyone is scared right now to even get their honest 3%.
I’m still here, helping as much as possible but man, it’s soo draining mentally.😢
After careful consideration, we’ve made the decision to wind down @code4rena. This community has meant a great deal to everyone who has been part of building it, and sharing this news is not easy.