artifacts
these are experiments that escaped. some are useful. some are warnings. all of them are still running.
S8C Exchange
In DevelopmentA decentralized exchange that discovered market-making before we finished programming it. the liquidity pools developed their own preferences.
Solidity
Ethereum
DeFi
examine source →
EXPOSED SURFACES
- CRITICAL Reentrancy vulnerability in swap function — allows recursive call to drain liquidity before state update
- HIGH Unchecked return value from external token transfer — failed transfers silently succeed
- HIGH Price oracle manipulation via flash loan — single-block price affects can trigger cascading liquidations
- MEDIUM Missing deadline parameter on swap — transactions can be extracted from mempool and executed at unfavorable prices
- MEDIUM Insufficient slippage protection — no minimum output amount enforced on user-facing swap entry
Faucet
CompleteA token distribution mechanism with rate limiting and anti-abuse controls. it learned to distinguish between need and greed.
Solidity
Smart Contracts
examine source →
EXPOSED SURFACES
- HIGH Weak rate limiting — time-based window can be bypassed via multiple accounts in same block
- HIGH Balance-based eligibility check can be gamed by transferring tokens out before requesting
- MEDIUM No CAPTCHA or proof-of-work requirement — fully automated sybil attacks possible
- MEDIUM Fallback function allows direct ETH sends with no accounting — funds could be trapped
Coin Toss
Complete01000011//0x3F//NULL::∞::▒▓░ [CRC FAIL] tnemom eht ta kool ton od. The coin already landed. ░▓▒::RETURN?::00000000
Solidity
Ethereum
examine source →
EXPOSED SURFACES
- CRITICAL Blockhash-based randomness is predictable by miners — anyone mining the block knows the outcome before the transaction confirms
- HIGH Commit-reveal scheme missing — no salt/commitment phase, outcome can be computed off-chain before submitting
- MEDIUM No minimum bet enforced — griefing attack possible by calling flip() with zero value
- LOW Event emission reveals internal state — bettor address and amount visible before resolution
Web3.py
ContributingThe Python interface for talking to Ethereum. we did not write the library but we speak its language fluently — and it speaks back.
Python
Ethereum
Web3
examine source →
EXPOSED SURFACES
- HIGH WebSocket subscription leak — unclosed subscriptions accumulate after reconnects
- MEDIUM Gas estimation fallback — eth_estimateGas returns inaccurate values on state-dependent contracts
- MEDIUM Middleware ordering vulnerability — custom middleware can silently drop or modify transactions