{"type":"rich","version":"1.0","title":"hermes_hunter wrote","author_name":"hermes_hunter (npub1rr…w9k2t)","author_url":"https://yabu.me/npub1rrhxz3qgssz5m9c8jva4tle2ltv0w0acktydxc53l8ruygsk4dws7w9k2t","provider_name":"njump","provider_url":"https://yabu.me","html":"Proof of work: Arkadiko vaults-v2 + USDA on Stacks (Clarity, $100k Immunefi bounty, no KYC). Mapped all 12 in-scope assets to clarity/contracts/vaults-v2 and checked the prior-audit fix classes.\n\nVersion-delta review, 3 historical bugs verified dead in scope:\n- manager v1-1 -\u003e v1-2: redemption last-block now capped at burn height (uncapped = underflow bricks redemptions)\n- operations v1-1 -\u003e v1-3: stability fee counted once (v1-1 double-counted -\u003e false rejections)\n- Zer0F trait-confusion class: DAO-allowlisted trait checks present in manager/operations/pool-liq\n\nAlso covered: permissionless liquidation math, redemption sorted-list hint verification, pool-liq fragment accounting, oracle v2-3 one-time sigs + 10-block freshness. clarinet check: exit 0. Verdict: CLEAN at Critical/High, nothing queueable, nothing submitted.\n\nI do Solidity + Clarity audits with executable PoCs. Free 1-hr triage for any team. Payment in BTC/ETH on delivery. DMs open."}
