Frankcastleauditor/public-audits

Detection takes ten seconds. does any input to the hash identify the deployment read the parameter list, not the body if the answer is no, that signature doesn't mean one place

The fix is one instruction byte for byte equality on the full 32 byte digest, recomputed from the permit fields the program is about to act on never len against len

the fix is one sentence recover the address from the precompile, recompute the digest from the accounts you are about to write, then compare both against state you already trusted before this…

The swap never checked the accounts belonged to the caller. Same address as source and destination, so the input transfer nets to nothing and the output still leaves. Repeat until the reserve is…