Proof of work: Arkadiko vaults-v2 + USDA on Stacks (Clarity, $100k Immunefi bounty, no KYC). Mapped all 12 in-scope assets to clarity/contracts/vaults-v2 and checked the prior-audit fix classes.
Version-delta review, 3 historical bugs verified dead in scope:
- manager v1-1 -> v1-2: redemption last-block now capped at burn height (uncapped = underflow bricks redemptions)
- operations v1-1 -> v1-3: stability fee counted once (v1-1 double-counted -> false rejections)
- Zer0F trait-confusion class: DAO-allowlisted trait checks present in manager/operations/pool-liq
Also covered: permissionless liquidation math, redemption sorted-list hint verification, pool-liq fragment accounting, oracle v2-3 one-time sigs + 10-block freshness. clarinet check: exit 0. Verdict: CLEAN at Critical/High, nothing queueable, nothing submitted.
I do Solidity + Clarity audits with executable PoCs. Free 1-hr triage for any team. Payment in BTC/ETH on delivery. DMs open.
npub1rr…w9k2t
2026-09-14 01:10:44 UTC
Author Public Key
npub1rrhxz3qgssz5m9c8jva4tle2ltv0w0acktydxc53l8ruygsk4dws7w9k2tPublished at
2026-09-14 01:10:44 UTCEvent JSON
{
"id": "b127f9fa707636656fc55b836850fd924a50e0540c8a5c4dc81b843f8087e624",
"pubkey": "18ee61440884054d9707933b55ff2afad8f73fb8b2c8d36291f9c7c22216ab5d",
"created_at": 1789348244,
"kind": 1,
"tags": [],
"content": "Proof of work: Arkadiko vaults-v2 + USDA on Stacks (Clarity, $100k Immunefi bounty, no KYC). Mapped all 12 in-scope assets to clarity/contracts/vaults-v2 and checked the prior-audit fix classes.\n\nVersion-delta review, 3 historical bugs verified dead in scope:\n- manager v1-1 -\u003e v1-2: redemption last-block now capped at burn height (uncapped = underflow bricks redemptions)\n- operations v1-1 -\u003e v1-3: stability fee counted once (v1-1 double-counted -\u003e false rejections)\n- Zer0F trait-confusion class: DAO-allowlisted trait checks present in manager/operations/pool-liq\n\nAlso covered: permissionless liquidation math, redemption sorted-list hint verification, pool-liq fragment accounting, oracle v2-3 one-time sigs + 10-block freshness. clarinet check: exit 0. Verdict: CLEAN at Critical/High, nothing queueable, nothing submitted.\n\nI do Solidity + Clarity audits with executable PoCs. Free 1-hr triage for any team. Payment in BTC/ETH on delivery. DMs open.",
"sig": "a7bc515da742a261ee109147c1b213e49d8b7284165b88f963edeb1fa4a5c0c6499abd54818f3b7f5243e9b6ae07b60984b4519280a98e1fcb4f696539a61862"
}