Execution-proven
Vulnerability classes
104 classes where the exploit executed on a fork and a clean control resisted. Names are plain language; categories are public.
| Class | Category | Severity | Verdict |
|---|---|---|---|
| Arbitrary delegatecall | Account abstraction | critical | PROVEN |
| Arbitrary storage write | Access control | critical | PROVEN |
| Assembly hidden delegatecall | Account abstraction | critical | PROVEN |
| Backdoor constructor owner | Access control | critical | PROVEN |
| Bridge message replay | Bridge | critical | PROVEN |
| Bridge replay real | Bridge | - | PROVEN |
| Claim forgery | Signature | - | PROVEN |
| Compliance module DoS | Signature | - | PROVEN |
| Compliance module swap | Signature | - | PROVEN |
| Compliance reentrancy | Reentrancy | critical | PROVEN |
| Cross contract reentrancy | Reentrancy | high | PROVEN |
| Cross ctx replay | Bridge | - | PROVEN |
| Cross function reentrancy | Reentrancy | critical | PROVEN |
| Decoy modifier access | Other | high | PROVEN |
| Donation health check bypass | Vault accounting | critical | PROVEN |
| DoS revert on refund | Logic / DoS | high | PROVEN |
| DoS unbounded distribute | Logic / DoS | medium | PROVEN |
| Ecdsa nonce reuse | ZK / crypto | - | PROVEN |
| Ecrecover zero address | Signature | - | PROVEN |
| Eip712 domain confusion | Signature | high | PROVEN |
| Eip712 typeconfusion | Signature | - | PROVEN |
| Eip7702 chain agnostic replay | Account abstraction | high | PROVEN |
| Eip7702 delegate persistent takeover | Account abstraction | critical | PROVEN |
| Eip7702 init frontrun | Account abstraction | critical | PROVEN |
| Eip7702 txorigin guard bypass | Account abstraction | high | PROVEN |
| Entrypoint forced revert griefing | Other | high | PROVEN |
| Erc1271 sig spoof | Signature | high | PROVEN |
| Erc1400 operator abuse | Vault accounting | high | PROVEN |
| Erc2771 multicall address spoof | Other | critical | PROVEN |
| Erc4337 validateop griefing | Account abstraction | medium | PROVEN |
| Erc4626 inflation | Vault accounting | critical | PROVEN |
| Erc721 receive reentrancy | Reentrancy | high | PROVEN |
| Erc734 execute replay | Other | - | PROVEN |
| Erc777 hook reentrancy | Reentrancy | critical | PROVEN |
| Evasive reentrancy | Reentrancy | critical | PROVEN |
| Execute no approval | Other | - | PROVEN |
| Expired claim | Signature | - | PROVEN |
| Fee on transfer accounting | Vault accounting | high | PROVEN |
| Flashloan governance | Governance | high | PROVEN |
| Flashloan oracle lending chain | Oracle | critical | PROVEN |
| Guard boundary wrong constant | Other | critical | PROVEN |
| Inconsistent rounding direction | Vault accounting | medium | PROVEN |
| Integer underflow | Integer arithmetic | high | PROVEN |
| Intent settlement forge | Bridge | critical | PROVEN |
| Issuer registry open | Signature | - | PROVEN |
| Jurisdiction limit bypass | Other | - | PROVEN |
| Key purpose confusion | Other | - | PROVEN |
| Malicious module | Signature | - | PROVEN |
| Merkle allowlist replay | Signature | high | PROVEN |
| Merkle claim no replay guard | Signature | high | PROVEN |
| Missing access control | Access control | high | PROVEN |
| Missing post op health check | Other | high | PROVEN |
| Missing role mint | Access control | high | PROVEN |
| Missing slippage min output | AMM / MEV | high | PROVEN |
| Module unbounded gas | Other | - | PROVEN |
| Oracle decimals mismatch | Oracle | high | PROVEN |
| Partition default bypass | Other | - | PROVEN |
| Pause bypass | Other | medium | PROVEN |
| Paymaster postop no calldata enforcement | Other | high | PROVEN |
| Permit frontrun nonce DoS | Logic / DoS | medium | PROVEN |
| Proof of reserves forge | Other | - | PROVEN |
| Proxy storage collision | Account abstraction | - | PROVEN |
| Quorum buyout low liquidity token | Governance | high | PROVEN |
| Read only reentrancy | Reentrancy | high | PROVEN |
| Readonly reentrancy oracle chain | Reentrancy | critical | PROVEN |
| Recovery abuse | Signature | - | PROVEN |
| Reentrancy | Reentrancy | - | PROVEN |
| Reentrancy eth | Reentrancy | critical | PROVEN |
| RemoveKey takeover | Other | - | PROVEN |
| Revoked claim | Signature | - | PROVEN |
| Root update no auth | Bridge | critical | PROVEN |
| Rounding direction inconsistent paths | Integer arithmetic | high | PROVEN |
| Sanctions module bypass | Other | - | PROVEN |
| Session key caveat enforcer gap | Other | high | PROVEN |
| Sig malleability | Signature | - | PROVEN |
| Sig replay | Signature | - | PROVEN |
| Signature no deadline replay | Signature | high | PROVEN |
| Signature replay cross domain | Access control | high | PROVEN |
| Single verifier dvn bridge forge | Bridge | critical | PROVEN |
| Slashing window withdrawal evasion | Other | high | PROVEN |
| Split state underflow | Other | high | PROVEN |
| Spot price manipulation | Oracle | critical | PROVEN |
| Stale approval post cancel reuse | Other | high | PROVEN |
| Stale price no check | Oracle | high | PROVEN |
| Threshold issuer | Signature | - | PROVEN |
| Timelock governance bypass | Governance | high | PROVEN |
| Transient storage low gas reentrancy | Reentrancy | critical | PROVEN |
| Twap window too short | Oracle | critical | PROVEN |
| Tx origin auth | Other | high | PROVEN |
| Tx origin indirection | Other | high | PROVEN |
| Unbounded price deviation | Oracle | high | PROVEN |
| Unchecked erc20 transfer | Token | high | PROVEN |
| Unchecked low level call | Logic / DoS | medium | PROVEN |
| Unprotected init | Reentrancy | - | PROVEN |
| Unprotected initializer | Access control | critical | PROVEN |
| Unrestricted addKey | Other | - | PROVEN |
| Unverified relayer mint | Bridge | critical | PROVEN |
| V4 flash accounting settle bypass | Vault accounting | critical | PROVEN |
| V4 hook missing access modifier | AMM / MEV | critical | PROVEN |
| V malleability | Signature | - | PROVEN |
| Weak randomness | Logic / DoS | high | PROVEN |
| Withdrawal double claim | Bridge | critical | PROVEN |
| Wrapper bypass | Reentrancy | - | PROVEN |
| ZK proof verify | ZK / crypto | - | PROVEN |