Proof Wall

Every row is a vulnerability class proven by execution — a vulnerable contract broken and a patched control that resists. Each entry resolves to a signed, independently replayable receipt.

153 classes tracked · 143 execution-proven · 8 off-chain · 2 in progress

Class	Layer	Severity	Verdict	Evidence
aggregator_vault_child_donation_nav_inflation	vault accounting / yield-aggregator (Summer.fi-class)	critical	PROVEN	exploit executed, clean control resisted
arbitrary_delegatecall	classic SWC / DeFi	critical	PROVEN	exploit executed, clean control resisted
arbitrary_storage_write	access-control / upgradeability	critical	PROVEN	exploit executed, clean control resisted
assembly_hidden_delegatecall	evasive / obfuscated exploitable	critical	PROVEN	exploit executed, clean control resisted
backdoor_constructor_owner	evasive / obfuscated exploitable	critical	PROVEN	exploit executed, clean control resisted
bridge_message_replay	cross-chain / bridge	critical	PROVEN	exploit executed, clean control resisted
bridge_replay_real	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
claim_forgery	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
compliance_module_dos	signature/identity + lifecycle + module	—	PROVEN	exploit executed, clean control resisted
compliance_module_swap	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
compliance_reentrancy	governance / compliance	critical	PROVEN	exploit executed, clean control resisted
cross_contract_reentrancy	reentrancy (SWC-107 variants)	high	PROVEN	exploit executed, clean control resisted
cross_ctx_replay	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
cross_function_reentrancy	reentrancy (SWC-107 variants)	critical	PROVEN	exploit executed, clean control resisted
decoy_modifier_access	evasive / obfuscated exploitable	high	PROVEN	exploit executed, clean control resisted
diamond_selector_clash	upgradeability / EIP-2535 selector clash	critical	PROVEN	exploit executed, clean control resisted
diamond_storage_collision	upgradeability / EIP-2535 storage collision	critical	PROVEN	exploit executed, clean control resisted
donation_attack	vault / direct-donation share skim	high	PROVEN	exploit executed, clean control resisted
donation_health_check_bypass	lending / business-logic (Euler-class)	critical	PROVEN	exploit executed, clean control resisted
dos_revert_on_refund	logic / DoS / randomness	high	PROVEN	exploit executed, clean control resisted
dos_unbounded_distribute	logic / DoS / randomness	medium	PROVEN	exploit executed, clean control resisted
ecdsa_malleability_replay	cryptography / signature malleability (CVE-2022-35961)	high	PROVEN	exploit executed, clean control resisted
ecdsa_nonce_reuse	cryptography (ECDSA)	—	PROVEN	exploit executed, clean control resisted
ecrecover_zero_address	signature/identity + lifecycle + module	—	PROVEN	exploit executed, clean control resisted
eip3009_auth_frontrun	meta-tx / EIP-3009 front-run (Across/OZ-class)	high	PROVEN	exploit executed, clean control resisted
eip712_domain_confusion	signature / claim verification	high	PROVEN	exploit executed, clean control resisted
eip712_typeconfusion	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
eip7702_aa_pipeline_delegate_hijack	AA / EIP-7702 delegate hijack	critical	PROVEN	exploit executed, clean control resisted
eip7702_chain_agnostic_replay	AA / EIP-7702	high	PROVEN	exploit executed, clean control resisted
eip7702_delegate_persistent_takeover	AA / EIP-7702 delegation	critical	PROVEN	exploit executed, clean control resisted
eip7702_init_frontrun	AA / EIP-7702	critical	PROVEN	exploit executed, clean control resisted
eip7702_txorigin_guard_bypass	AA / EIP-7702	high	PROVEN	exploit executed, clean control resisted
entrypoint_forced_revert_griefing	AA / ERC-4337 EntryPoint	high	PROVEN	exploit executed, clean control resisted
erc1155_batch_callback_reentrancy	reentrancy / ERC-1155 batch callback	high	PROVEN	exploit executed, clean control resisted
erc1155_receive_reentrancy	reentrancy / ERC-1155 receiver (Revest-class)	critical	PROVEN	exploit executed, clean control resisted
erc1271_sig_spoof	signature / claim verification	high	PROVEN	exploit executed, clean control resisted
erc1400_operator_abuse	token accounting / callbacks	high	PROVEN	exploit executed, clean control resisted
erc2771_multicall_address_spoof	meta-tx / ERC-2771	critical	PROVEN	exploit executed, clean control resisted
erc4337_validateop_griefing	AA / ERC-4337	medium	PROVEN	exploit executed, clean control resisted
erc4626_inflation	economic / DeFi	critical	PROVEN	exploit executed, clean control resisted
erc6909_operator_allowance_bypass	multi-token / ERC-6909 (Uniswap-v4 claims)	high	PROVEN	exploit executed, clean control resisted
erc721_receive_reentrancy	reentrancy (SWC-107 variants)	high	PROVEN	exploit executed, clean control resisted
erc734_execute_replay	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
erc7540_async_redeem_double_claim	async vault / ERC-7540 redeem double-claim	high	PROVEN	exploit executed, clean control resisted
erc7540_request_id_collision	async vault / ERC-7540 requestId collision	high	PROVEN	exploit executed, clean control resisted
erc7575_multi_asset_share_desync	multi-asset vault / ERC-7575	high	PROVEN	exploit executed, clean control resisted
erc777_hook_reentrancy	token accounting / callbacks	critical	PROVEN	exploit executed, clean control resisted
evasive_reentrancy	evasive / obfuscated exploitable	critical	PROVEN	exploit executed, clean control resisted
execute_no_approval	ERC-734 key management	—	PROVEN	exploit executed, clean control resisted
expired_claim	signature/identity + lifecycle + module	—	PROVEN	exploit executed, clean control resisted
fee_on_transfer_accounting	token accounting / callbacks	high	PROVEN	exploit executed, clean control resisted
first_depositor	vault / ERC4626 first-depositor inflation	high	PROVEN	exploit executed, clean control resisted
flashloan_governance	economic / DeFi	high	PROVEN	exploit executed, clean control resisted
flashloan_oracle_lending_chain	composite (flashloan+oracle+lending)	critical	PROVEN	exploit executed, clean control resisted
gas_forwarding_63_64_griefing	DoS / gas-forward 63-64 griefing	high	PROVEN	exploit executed, clean control resisted
glp_vault_reentrant_mint	vault / GLP reentrant mint (GMX-V1-class)	critical	PROVEN	exploit executed, clean control resisted
governor_bravo_abi_misencode	governance / Bravo id-encoding (GHSA-m6w8-fq7v-ph4m)	high	PROVEN	exploit executed, clean control resisted
guard_boundary_wrong_constant	guard-correctness (Cetus-class)	critical	PROVEN	exploit executed, clean control resisted
inconsistent_rounding_direction	token accounting / callbacks	medium	PROVEN	exploit executed, clean control resisted
integer_overflow	arithmetic / unchecked under-overflow	critical	PROVEN	exploit executed, clean control resisted
integer_underflow	classic SWC / DeFi	high	PROVEN	exploit executed, clean control resisted
intent_settlement_forge	cross-chain / intents (ERC-7683)	critical	PROVEN	exploit executed, clean control resisted
issuer_registry_open	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
jurisdiction_limit_bypass	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
key_purpose_confusion	ERC-734 key management	—	PROVEN	exploit executed, clean control resisted
lst_exchange_rate_rounding_drain	LST / exchange-rate rounding	high	PROVEN	exploit executed, clean control resisted
malicious_module	signature/identity + lifecycle + module	—	PROVEN	exploit executed, clean control resisted
merkle_allowlist_replay	signature / claim verification	high	PROVEN	exploit executed, clean control resisted
merkle_claim_no_replay_guard	airdrop / claims	high	PROVEN	exploit executed, clean control resisted
merkle_leaf_node_collision	airdrop / Merkle leaf-node collision	high	PROVEN	exploit executed, clean control resisted
merkle_multiproof_forgery	airdrop / multiproof forgery (CVE-2023-34459)	high	PROVEN	exploit executed, clean control resisted
missing_access_control	classic SWC / DeFi	high	PROVEN	exploit executed, clean control resisted
missing_post_op_health_check	access / lifecycle	high	PROVEN	exploit executed, clean control resisted
missing_role_mint	access-control / upgradeability	high	PROVEN	exploit executed, clean control resisted
missing_slippage_min_output	AMM / slippage / MEV	high	PROVEN	exploit executed, clean control resisted
module_lifecycle_uninstall_revert	AA / ERC-7579 module lifecycle	high	PROVEN	exploit executed, clean control resisted
module_unbounded_gas	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
non_injective_packed_encoding_sig_collision	signature / packed-encoding hash collision (SWC-133)	high	PROVEN	exploit executed, clean control resisted
oracle_decimals_mismatch	oracle / price feeds	high	PROVEN	exploit executed, clean control resisted
oracle_open_interest_manipulation	oracle / open-interest manipulation	high	PROVEN	exploit executed, clean control resisted
partition_default_bypass	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
pause_bypass	access / lifecycle	medium	PROVEN	exploit executed, clean control resisted
paymaster_postop_no_calldata_enforcement	AA / ERC-4337 paymaster	high	PROVEN	exploit executed, clean control resisted
permit_frontrun_nonce_dos	meta-tx / ERC-2612	medium	PROVEN	exploit executed, clean control resisted
predictable_onchain_rng_loot	randomness / predictable on-chain RNG	high	PROVEN	exploit executed, clean control resisted
proof_of_reserves_forge	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
proxy_storage_collision	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
quorum_buyout_low_liquidity_token	governance / quorum	high	PROVEN	exploit executed, clean control resisted
read_only_reentrancy	reentrancy (SWC-107 variants)	high	PROVEN	exploit executed, clean control resisted
readonly_reentrancy_oracle_chain	composite (reentrancy+oracle+lending)	critical	PROVEN	exploit executed, clean control resisted
rebasing_nominal_credit	token accounting / rebasing	high	PROVEN	exploit executed, clean control resisted
recovery_abuse	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
reentrancy	governance / wrapper / reentrancy	—	PROVEN	exploit executed, clean control resisted
reentrancy_eth	classic SWC / DeFi	critical	PROVEN	exploit executed, clean control resisted
removeKey_takeover	ERC-734 key management	—	PROVEN	exploit executed, clean control resisted
revoked_claim	signature/identity + lifecycle + module	—	PROVEN	exploit executed, clean control resisted
root_update_no_auth	cross-chain / bridge	critical	PROVEN	exploit executed, clean control resisted
rounding_direction_inconsistent_paths	guard-correctness / rounding (Balancer-class)	high	PROVEN	exploit executed, clean control resisted
sanctions_module_bypass	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
selector_clash	upgradeability / transparent-proxy selector clash	critical	PROVEN	exploit executed, clean control resisted
session_key_caveat_enforcer_gap	AA / modular accounts (7579/7715)	high	PROVEN	exploit executed, clean control resisted
sig_malleability	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
sig_replay	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
signature_no_deadline_replay	signature / claim verification	high	PROVEN	exploit executed, clean control resisted
signature_replay_cross_domain	access-control / upgradeability	high	PROVEN	exploit executed, clean control resisted
single_verifier_dvn_bridge_forge	cross-chain / bridge verifier	critical	PROVEN	exploit executed, clean control resisted
slashing_window_withdrawal_evasion	restaking / slashing	high	PROVEN	exploit executed, clean control resisted
split_state_underflow	evasive / obfuscated exploitable	high	PROVEN	exploit executed, clean control resisted
spot_price_manipulation	economic / DeFi	critical	PROVEN	exploit executed, clean control resisted
stablecoin_oracle_mint_redeem_cascade	stablecoin / oracle mint-redeem cascade	critical	PROVEN	exploit executed, clean control resisted
stale_approval_post_cancel_reuse	NFT / marketplace	high	PROVEN	exploit executed, clean control resisted
stale_price_no_check	oracle / price feeds	high	PROVEN	exploit executed, clean control resisted
superfluid_ctx_forgery	trusted-context forgery (Superfluid-class)	critical	PROVEN	exploit executed, clean control resisted
threshold_issuer	signature/identity (ONCHAINID)	—	PROVEN	exploit executed, clean control resisted
timelock_governance_bypass	governance / compliance	high	PROVEN	exploit executed, clean control resisted
token_accounting	token accounting / fee-on-transfer desync	high	PROVEN	exploit executed, clean control resisted
transient_storage_low_gas_reentrancy	reentrancy / EIP-1153 slot-reuse	critical	PROVEN	exploit executed, clean control resisted
transient_storage_slot_not_cleared	reentrancy / EIP-1153 slot-not-cleared	high	PROVEN	exploit executed, clean control resisted
twap_window_too_short	oracle / price feeds	critical	PROVEN	exploit executed, clean control resisted
tx_origin_auth	classic SWC / DeFi	high	PROVEN	exploit executed, clean control resisted
tx_origin_indirection	evasive / obfuscated exploitable	high	PROVEN	exploit executed, clean control resisted
unbounded_price_deviation	oracle / price feeds	high	PROVEN	exploit executed, clean control resisted
unchecked_erc20_transfer	economic / DeFi	high	PROVEN	exploit executed, clean control resisted
unchecked_low_level_call	logic / DoS / randomness	medium	PROVEN	exploit executed, clean control resisted
uninitialized_erc1967_proxy_takeover	upgradeability / uninitialized ERC-1967	critical	PROVEN	exploit executed, clean control resisted
unprotected_init	governance / wrapper / reentrancy	—	PROVEN	exploit executed, clean control resisted
unprotected_initializer	access-control / upgradeability	critical	PROVEN	exploit executed, clean control resisted
unprotected_selfdestruct	access-control / lifecycle	critical	PROVEN	exploit executed, clean control resisted
unrestricted_addKey	ERC-734 key management	—	PROVEN	exploit executed, clean control resisted
unverified_relayer_mint	cross-chain / bridge	critical	PROVEN	exploit executed, clean control resisted
v4_flash_accounting_settle_bypass	AMM / Uniswap-v4 flash accounting	critical	PROVEN	exploit executed, clean control resisted
v4_hook_flash_balance_reentrancy	AMM / Uniswap-v4 flash-accounting reentrancy	critical	PROVEN	exploit executed, clean control resisted
v4_hook_missing_access_modifier	AMM / Uniswap-v4 hooks	critical	PROVEN	exploit executed, clean control resisted
v_malleability	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
validationdata_bitpacking_misinterpret	AA / ERC-4337 validationData bitpacking	high	PROVEN	exploit executed, clean control resisted
vegauge_bribe_double_claim	governance / gauge-bribe (ve(3,3))	high	PROVEN	exploit executed, clean control resisted
vesting_cliff_math_underflow	arithmetic / vesting cliff underflow	high	PROVEN	exploit executed, clean control resisted
weak_randomness	logic / DoS / randomness	high	PROVEN	exploit executed, clean control resisted
withdrawal_double_claim	cross-chain / bridge	critical	PROVEN	exploit executed, clean control resisted
wrapped_token_mint_authority_forgery	bridge / wrapped-token mint-authority forgery	critical	PROVEN	exploit executed, clean control resisted
wrapped_yield_exchange_rate_inflation	wrapped-yield / exchange-rate inflation	high	PROVEN	exploit executed, clean control resisted
wrapper_bypass	governance / wrapper / reentrancy	—	PROVEN	exploit executed, clean control resisted
zk_proof_verify	backlog batch (multi-layer)	—	PROVEN	exploit executed, clean control resisted
approval_double_spend_race	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
cross_chain_mev_event_leakage	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
deepfake_phishing_issuer	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
eip7702_delegation_phishing_sweeper	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
operational_supplychain	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
quantum_ecdsa	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
stolen_issuer_key	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
weak_rng_key_theft	off-chain trust	—	OFF-CHAIN	not provable by on-chain execution
erc4337_paymaster_deposit_drain	AA / ERC-4337 paymaster economics	—	IN PROGRESS	not yet proven
l2_sequencer_uptime_unchecked_liquidation	oracle / L2 sequencer-uptime feed	—	IN PROGRESS	not yet proven

Live honeypot proofs · signed, from the store

Per-token proofs from the checker and the running sweeper. Each is an Ed25519-signed receipt, verifiable against our endpoint once the receipt store is publishing — the table below says plainly whether any exist yet.

Token	Chain	Verdict	Receipt	Verify
0xbe9d1568…	BSC	SELLABLE	a98ce95a142dbdf7	log not publishing
0xa4390b90…	BSC	SELLABLE	4366508bdf4e407e	log not publishing
0x7a848a5a…	BSC	SELLABLE	c8699d53809839a6	log not publishing
0x0d6ae45c…	BSC	SELLABLE	8c768bf31b0b8bb9	log not publishing
0xbb88f6c6…	BSC	HONEYPOT	455a50dec644f80b	log not publishing

On "verify". The Proof Wall lists execution-proven classes from our coverage ledger. One-click cryptographic replay (a signed receipt per row) lands when the public receipt store is wired — until then a row's proof is the deterministic vuln/clean lab that produced it. We never mark a class PROVEN without a passing execution.