The proof library.

Everyone else publishes a PDF you have to trust. Every report below is a proven vulnerability class — read it, download the signed receipt, and re-run the verification yourself. 141 classes and counting.

aggregator vault child donation nav inflationcriticalvault accounting / yield-aggregator (Summer.fi-class) arbitrary delegatecallcriticalclassic SWC / DeFi arbitrary storage writecriticalaccess-control / upgradeability assembly hidden delegatecallcriticalevasive / obfuscated exploitable backdoor constructor ownercriticalevasive / obfuscated exploitable bridge message replaycriticalcross-chain / bridge compliance reentrancycriticalgovernance / compliance cross function reentrancycriticalreentrancy (SWC-107 variants) diamond selector clashcriticalupgradeability / EIP-2535 selector clash diamond storage collisioncriticalupgradeability / EIP-2535 storage collision donation health check bypasscriticallending / business-logic (Euler-class)$197M re-proven eip7702 aa pipeline delegate hijackcriticalAA / EIP-7702 delegate hijack eip7702 delegate persistent takeovercriticalAA / EIP-7702 delegation eip7702 init frontruncriticalAA / EIP-7702 erc1155 receive reentrancycriticalreentrancy / ERC-1155 receiver (Revest-class) erc2771 multicall address spoofcriticalmeta-tx / ERC-2771 erc4626 inflationcriticaleconomic / DeFi erc777 hook reentrancycriticaltoken accounting / callbacks evasive reentrancycriticalevasive / obfuscated exploitable flashloan oracle lending chaincriticalcomposite (flashloan+oracle+lending) glp vault reentrant mintcriticalvault / GLP reentrant mint (GMX-V1-class) guard boundary wrong constantcriticalguard-correctness (Cetus-class) integer overflowcriticalarithmetic / unchecked under-overflow intent settlement forgecriticalcross-chain / intents (ERC-7683) readonly reentrancy oracle chaincriticalcomposite (reentrancy+oracle+lending) reentrancy ethcriticalclassic SWC / DeFi root update no authcriticalcross-chain / bridge selector clashcriticalupgradeability / transparent-proxy selector clash single verifier dvn bridge forgecriticalcross-chain / bridge verifier spot price manipulationcriticaleconomic / DeFi stablecoin oracle mint redeem cascadecriticalstablecoin / oracle mint-redeem cascade superfluid ctx forgerycriticaltrusted-context forgery (Superfluid-class) transient storage low gas reentrancycriticalreentrancy / EIP-1153 slot-reuse twap window too shortcriticaloracle / price feeds uninitialized erc1967 proxy takeovercriticalupgradeability / uninitialized ERC-1967 unprotected initializercriticalaccess-control / upgradeability unprotected selfdestructcriticalaccess-control / lifecycle unverified relayer mintcriticalcross-chain / bridge v4 flash accounting settle bypasscriticalAMM / Uniswap-v4 flash accounting v4 hook flash balance reentrancycriticalAMM / Uniswap-v4 flash-accounting reentrancy v4 hook missing access modifiercriticalAMM / Uniswap-v4 hooks withdrawal double claimcriticalcross-chain / bridge wrapped token mint authority forgerycriticalbridge / wrapped-token mint-authority forgery bridge replay realbacklog batch (multi-layer) claim forgerysignature/identity (ONCHAINID) compliance module dossignature/identity + lifecycle + module compliance module swapsignature/identity (ONCHAINID) cross contract reentrancyhighreentrancy (SWC-107 variants) cross ctx replaysignature/identity (ONCHAINID) decoy modifier accesshighevasive / obfuscated exploitable donation attackhighvault / direct-donation share skim dos revert on refundhighlogic / DoS / randomness dos unbounded distributemediumlogic / DoS / randomness ecdsa malleability replayhighcryptography / signature malleability (CVE-2022-35961) ecdsa nonce reusecryptography (ECDSA) ecrecover zero addresssignature/identity + lifecycle + module eip3009 auth frontrunhighmeta-tx / EIP-3009 front-run (Across/OZ-class) eip712 domain confusionhighsignature / claim verification eip712 typeconfusionsignature/identity (ONCHAINID) eip7702 chain agnostic replayhighAA / EIP-7702 eip7702 txorigin guard bypasshighAA / EIP-7702 entrypoint forced revert griefinghighAA / ERC-4337 EntryPoint erc1155 batch callback reentrancyhighreentrancy / ERC-1155 batch callback erc1271 sig spoofhighsignature / claim verification erc1400 operator abusehightoken accounting / callbacks erc4337 validateop griefingmediumAA / ERC-4337 erc721 receive reentrancyhighreentrancy (SWC-107 variants) erc734 execute replaybacklog batch (multi-layer) erc7540 async redeem double claimhighasync vault / ERC-7540 redeem double-claim erc7540 request id collisionhighasync vault / ERC-7540 requestId collision execute no approvalERC-734 key management expired claimsignature/identity + lifecycle + module fee on transfer accountinghightoken accounting / callbacks first depositorhighvault / ERC4626 first-depositor inflation flashloan governancehigheconomic / DeFi gas forwarding 63 64 griefinghighDoS / gas-forward 63-64 griefing governor bravo abi misencodehighgovernance / Bravo id-encoding (GHSA-m6w8-fq7v-ph4m) inconsistent rounding directionmediumtoken accounting / callbacks integer underflowhighclassic SWC / DeFi issuer registry opensignature/identity (ONCHAINID) jurisdiction limit bypassbacklog batch (multi-layer) key purpose confusionERC-734 key management lst exchange rate rounding drainhighLST / exchange-rate rounding malicious modulesignature/identity + lifecycle + module merkle allowlist replayhighsignature / claim verification merkle claim no replay guardhighairdrop / claims merkle leaf node collisionhighairdrop / Merkle leaf-node collision merkle multiproof forgeryhighairdrop / multiproof forgery (CVE-2023-34459) missing access controlhighclassic SWC / DeFi missing post op health checkhighaccess / lifecycle missing role minthighaccess-control / upgradeability missing slippage min outputhighAMM / slippage / MEV module lifecycle uninstall reverthighAA / ERC-7579 module lifecycle module unbounded gasbacklog batch (multi-layer) non injective packed encoding sig collisionhighsignature / packed-encoding hash collision (SWC-133) oracle decimals mismatchhighoracle / price feeds oracle open interest manipulationhighoracle / open-interest manipulation partition default bypassbacklog batch (multi-layer) pause bypassmediumaccess / lifecycle paymaster postop no calldata enforcementhighAA / ERC-4337 paymaster permit frontrun nonce dosmediummeta-tx / ERC-2612 predictable onchain rng loothighrandomness / predictable on-chain RNG proof of reserves forgebacklog batch (multi-layer) proxy storage collisionbacklog batch (multi-layer) quorum buyout low liquidity tokenhighgovernance / quorum read only reentrancyhighreentrancy (SWC-107 variants) rebasing nominal credithightoken accounting / rebasing recovery abusesignature/identity (ONCHAINID) reentrancygovernance / wrapper / reentrancy removeKey takeoverERC-734 key management revoked claimsignature/identity + lifecycle + module rounding direction inconsistent pathshighguard-correctness / rounding (Balancer-class) sanctions module bypassbacklog batch (multi-layer) session key caveat enforcer gaphighAA / modular accounts (7579/7715) sig malleabilitysignature/identity (ONCHAINID) sig replaysignature/identity (ONCHAINID) signature no deadline replayhighsignature / claim verification signature replay cross domainhighaccess-control / upgradeability slashing window withdrawal evasionhighrestaking / slashing split state underflowhighevasive / obfuscated exploitable stale approval post cancel reusehighNFT / marketplace stale price no checkhighoracle / price feeds threshold issuersignature/identity (ONCHAINID) timelock governance bypasshighgovernance / compliance token accountinghightoken accounting / fee-on-transfer desync transient storage slot not clearedhighreentrancy / EIP-1153 slot-not-cleared tx origin authhighclassic SWC / DeFi tx origin indirectionhighevasive / obfuscated exploitable unbounded price deviationhighoracle / price feeds unchecked erc20 transferhigheconomic / DeFi unchecked low level callmediumlogic / DoS / randomness unprotected initgovernance / wrapper / reentrancy unrestricted addKeyERC-734 key management v malleabilitybacklog batch (multi-layer) validationdata bitpacking misinterprethighAA / ERC-4337 validationData bitpacking vegauge bribe double claimhighgovernance / gauge-bribe (ve(3,3)) vesting cliff math underflowhigharithmetic / vesting cliff underflow weak randomnesshighlogic / DoS / randomness wrapped yield exchange rate inflationhighwrapped-yield / exchange-rate inflation wrapper bypassgovernance / wrapper / reentrancy zk proof verifybacklog batch (multi-layer)