ERC-4626

AVS

October 28, 2024

Build secure Uniswap V4 Hooks in AVS

In recent months, both Uniswap V4 and EigenLayer’s Actively Validated Services (AVS) have gained significant attention – not without reason. Uniswap V4 introduced a […]

Paweł Kuryłowicz

Managing Partner & Smart Contract Security Auditor

YieldNest – Inflating vault’s share rate via reentrancy

This attack results in the theft of assets alongside an inflated share value Vulnerability Details The withdrawal process from the Max Vault works in […]

Paweł Kuryłowicz

Managing Partner & Smart Contract Security Auditor

YieldNest – Invalid amounts of asset returned by strategies

This issue prevents the successful withdrawal of assets based on the values returned by the ERC4626 functions and their equivalent versions for different assets. […]

Paweł Kuryłowicz

Managing Partner & Smart Contract Security Auditor

YieldNest – Vault not compliant with ERC4626 in maxWithdraw function

This results in non-compliance with the ERC4626 standard, leading to the potentialfor withdrawal attempts based on maxWithdraw results to fail. Vulnerability Details Per the […]

Paweł Kuryłowicz

Managing Partner & Smart Contract Security Auditor

YieldNest – Security Review of Max Vaults and integration with Kernel

YieldNest partnered with Composable Security to evaluate the security of its Max Vault integration with the Kernel protocol on BNB Chain. The goal was […]

Paweł Kuryłowicz

Managing Partner & Smart Contract Security Auditor

ERC-4626: Easy To Understand Essentials

This article covers the basics of ERC4626. Take a helicopter view of how it works and what are the main security concerns that need […]

Paweł Kuryłowicz

Managing Partner & Smart Contract Security Auditor

Join the newsletter now

Please wait...

Thank you for sign up!

Let us help

Get throughly tested by the creators of Smart Contract Security Verification Standard

Request audit