{
  "researcher": "Tradi3",
  "count": 11,
  "findings": [
    {
      "ref": "T3-008",
      "target": "Quantus",
      "title": "Quantus POS accepts a replaceable pool transaction as payment before execution",
      "class": "payment confirmation / transaction lifecycle",
      "severity": "High",
      "verdict": "paid",
      "status": "Public",
      "platform": "Immunefi",
      "contest": "Audit Comp | Quantus",
      "date": "2026-08-25",
      "url": "https://reports.immunefi.com/quantus-or-audit-competition/90460-w-a-high-quantus-pos-accepts-a-replaceable-pool-transaction-as-payment-before-execution",
      "poc": null
    },
    {
      "ref": "T3-011",
      "target": "ENS",
      "title": "Renewal route prices and displays the normalized name but signs the raw label",
      "class": "name normalization / transaction integrity",
      "severity": "Critical",
      "verdict": "paid",
      "status": "Public",
      "platform": "Immunefi",
      "contest": "Audit Competition | ENS",
      "date": "2026-08-19",
      "url": "https://reports.immunefi.com/ens-or-audit-competition/89456-w-a-critical-renewal-route-prices-and-displays-the-normalized-name-but-signs-the-raw-label-so",
      "poc": null
    },
    {
      "ref": "T3-007",
      "target": "Quantus",
      "title": "High-security accounts can be drained immediately via an unbounded tip on a whitelisted call",
      "class": "transaction fees / account policy",
      "severity": "Critical",
      "verdict": "paid",
      "status": "Public",
      "platform": "Immunefi",
      "contest": "Audit Comp | Quantus",
      "date": "2026-08-18",
      "url": "https://reports.immunefi.com/quantus-or-audit-competition/89347-bc-critical-high-security-accounts-can-be-drained-immediately-via-an-unbounded-tip-on-a-whitel",
      "poc": null
    },
    {
      "ref": "T3-010",
      "target": "Firelight",
      "title": "Assessment approval can execute a replacement loss schedule the Risk Consortium never reviewed",
      "class": "approval binding / access control",
      "severity": "High",
      "verdict": "paid",
      "status": "Public",
      "platform": "Immunefi",
      "contest": "Audit Comp | Firelight",
      "date": "2026-08-14",
      "url": "https://reports.immunefi.com/firelight-sep.2026-or-audit-competition/88618-sc-high-assessment-approval-can-execute-a-replacement-loss-schedule-the-risk-consortium-never",
      "poc": null
    },
    {
      "ref": "T3-009",
      "target": "Firelight",
      "title": "CoverOrderAllocator reuses collateral still backing previous-period claims, leaving new cover insolvent",
      "class": "collateral accounting / solvency",
      "severity": "High",
      "verdict": "paid",
      "status": "Public",
      "platform": "Immunefi",
      "contest": "Audit Comp | Firelight",
      "date": "2026-08-12",
      "url": "https://reports.immunefi.com/firelight-sep.2026-or-audit-competition/88281-sc-high-coverorderallocator-reuses-collateral-still-backing-previous-period-claims-leaving-new",
      "poc": null
    },
    {
      "ref": "T3-004",
      "target": "Metric",
      "title": "Fixed-E8 Pyth normalization underprices standard Base MOG/USDC and transfers 5.28% of LP principal",
      "class": "oracle normalization",
      "severity": "Medium",
      "verdict": "paid",
      "status": "Public",
      "platform": "Sherlock",
      "contest": "Metric",
      "date": "2026-07-01",
      "url": "https://audits.sherlock.xyz/watson/Tradi3",
      "poc": null
    },
    {
      "ref": "T3-003",
      "target": "Metric",
      "title": "Fixed-E8 synthetic-ratio truncation lets traders take 47.83% of one-sided RSR/cbBTC LP principal",
      "class": "AMM math / rounding",
      "severity": "Medium",
      "verdict": "paid",
      "status": "Public",
      "platform": "Sherlock",
      "contest": "Metric",
      "date": "2026-07-01",
      "url": "https://audits.sherlock.xyz/watson/Tradi3",
      "poc": null
    },
    {
      "ref": "T3-002",
      "target": "Metric",
      "title": "Price velocity guard can be bypassed by splitting a same-block price move",
      "class": "oracle / guard bypass",
      "severity": "Medium",
      "verdict": "paid",
      "status": "Public",
      "platform": "Sherlock",
      "contest": "Metric",
      "date": "2026-07-01",
      "url": "https://audits.sherlock.xyz/watson/Tradi3",
      "poc": null
    },
    {
      "ref": "T3-001",
      "target": "Morpho Midnight",
      "title": "MidnightBundles minUnits check can pass before callback-created loss slashes received credit",
      "class": "callback ordering",
      "severity": "Low",
      "verdict": "confirmed",
      "status": "Public",
      "platform": "Cantina",
      "contest": "Morpho Midnight",
      "date": "2026-06-01",
      "url": "https://cantina.xyz/code/4679e0fa-85f7-4ea5-8827-ee6c70bdee6b/findings/652",
      "poc": "https://gist.github.com/krutftw/0545d4660a73f661cca91292ad56b5ed"
    },
    {
      "ref": "T3-006",
      "target": "Revert Finance",
      "title": "Native ETH removeLiquidity reentrancy lets an LP swap against withdrawn stale reserves",
      "class": "reentrancy / reserve accounting",
      "severity": "High",
      "verdict": "confirmed",
      "status": "Public",
      "platform": "Cantina",
      "contest": "StableSwap Hooks",
      "date": "2026-05-08",
      "url": "https://cantina.xyz/competitions/e55ee7b9-6c99-42f8-8338-39f3dd134ef3/leaderboard",
      "poc": "https://github.com/krutftw/audit-portfolio/blob/main/findings/RemoveLiquidityReentrancyPoC.t.sol"
    },
    {
      "ref": "T3-005",
      "target": "Base Azul",
      "title": "Hardcoded 10-block ZK witness interval makes 30-block challenge proofs unverifiable",
      "class": "ZK witness generation / challenge verification",
      "severity": "Medium",
      "verdict": "paid",
      "status": "Public",
      "platform": "Immunefi",
      "contest": "Audit Comp | Base Azul",
      "date": "2026-04-28",
      "url": "https://reports.immunefi.com/base/75354-bc-medium-hardcoded-10-block-zk-witness-interval-makes-30-block-challenge-proofs-unverifiable",
      "poc": null
    }
  ]
}