Issues

[Audit] Summary - Focused audit / Core treasury / Ruthless thief, Fee evader

Bananapus/version-6#252 · opened

on Oct 7, 2026

[Audit] [LOW] Documented "unlimited" payout limit (type(uint224).max) makes cash outs of a project's other tokens revert

Bananapus/version-6#251 · opened

on Oct 7, 2026

Cross-chain revnets can leak value via local-only sucker prepare cash-outs

Bananapus/version-6#159 · opened

on May 28, 2026

[Audit] Summary — Fresh Nemesis project handles src+script

Bananapus/version-6#156 · opened

on May 25, 2026

[Audit] [MEDIUM] Project handles can return verified handles with unblocked invisible Unicode controls

Bananapus/version-6#155 · opened

on May 25, 2026

[Audit] Summary - Nemesis Defifa lifecycle/state audit

Bananapus/version-6#149 · opened

on May 18, 2026

[Audit] [MEDIUM] Zero-timeout Defifa games can lock if only one tier participates

Bananapus/version-6#148 · opened

on May 18, 2026

[Medium] Zero-balance snapshots are treated as uninitialized, so the same round can be snapshotted twice

Bananapus/version-6#119 · opened

on May 9, 2026

2

[Audit] [MEDIUM] Fee project deployer can accept mismatched canonical revnet config

Bananapus/version-6#101 · opened

on May 5, 2026

[Audit] [MEDIUM] deploy-all verifier does not prove primary native terminal wiring for CPN REV or BAN

Bananapus/version-6#99 · opened

on Apr 29, 2026

[Audit] [MEDIUM] deploy-all verifier can pass while mandatory components and ownership checks are skipped

Bananapus/version-6#98 · opened

on Apr 29, 2026

[Audit] Round 7 Summary — Aggressive exploitation: Forge POCs, Codex second opinion, line-by-line traces

Bananapus/version-6#88 · opened

on Apr 22, 2026

[Audit] Round 6 Summary — Deep-dive on REVLoans, suckers, UniV4, reentrancy, permissions, decimals, 721/banny

Bananapus/version-6#87 · opened