// Research

Findings, documented.

Long-form write-ups of issues Kvazar found. Each one carries a severity, a disclosure timeline and the fix.

3 findings

Acme Vaults (fictional)

PLACEHOLDER: Oracle staleness lets vault shares be minted at yesterday's price

Fake sample finding. A missing heartbeat check on a price feed allowed deposits to be valued against a stale round during volatility.

Example Bridge (fictional)

Fake sample finding. Domain separators omitted the chain id, so a valid withdrawal proof on one chain was replayable on another.

Sample Token (fictional)

Fake sample finding. Rounding in favour of the caller let dust accumulate into a slow drain across thousands of small transfers.