All issues

Search results

OhShii Labs — index of all 65 findings across #4–#11 and #23–#28 (map, not new findings)

Status: Open.

#29 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

OhShii Labs review, round 2 — 6/6 · 4 findings (#28.1–#28.4): a test that cannot fail, two latent items, and the method note

Status: Open.

#28 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

OhShii Labs review, round 2 — 5/6 · 4 findings (#27.1–#27.4): load shedding refuses exits, the Bridge counts admissions behind the commit, and two oracle clocks measure the wrong thing

Status: Open.

#27 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

OhShii Labs review, round 2 — 4/6 · 5 findings (#26.1–#26.5): the archive chain — one bad segment fails every read, and the segments nobody can fix are the ones nobody observes

Status: Open.

#26 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

OhShii Labs review, round 2 — 3/6 · 5 findings (#25.1–#25.5): the season boundary clears one half of five paired ledgers

Status: Open.

#25 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

OhShii Labs review, round 2 — 2/6 · 5 findings (#24.1–#24.5): the arbitrageur canister trades against the venue with no shared invariants

Status: Open.

#24 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

OhShii Labs review, round 2 — 1/6 · 2 findings (#23.1–#23.2): the self-funding loop can re-enter after an ambiguous ledger reject

Status: Open.

#23 In dfinity/public-multidex;

· rvnt9999 opened on Aug 4, 2026

Menese DeFi Team evaluation, Part 4: attacker-controlled work multipliers on the matcher and the liquidation path

Status: Open.

#22 In dfinity/public-multidex;

· KYounesMercatura opened on Aug 4, 2026

Both pre-push lint-gate checks certified in #10 are structurally inert

Status: Open.

#21 In dfinity/public-multidex;

· andreij6 opened on Aug 2, 2026

Three sweeps #12 lists as bounded are not bounded

Status: Open.

#19 In dfinity/public-multidex;

· andreij6 opened on Aug 2, 2026

verifyChain never anchors the recomputed tail to chainHead, so tail corruption verifies clean

Status: Open.

#18 In dfinity/public-multidex;

· andreij6 opened on Aug 2, 2026

The outlier-trim fix proposed in #3 and #9 leaves the defect in place

Status: Open.

#17 In dfinity/public-multidex;

· andreij6 opened on Aug 2, 2026