CRITICAL FINDING (F-9): deposit-as-repayment reentrancy on live v2 pools - #83

Merged

mattglory merged 4 commits into

mainfrom

security-lead/f9-v2-pool-deposit-reentrancy

Oct 1, 2026

Commits on Oct 1, 2026

CRITICAL FINDING (F-9): deposit-as-repayment reentrancy on live v2 pools
unixwhisperer
committed
8fca222
fix: F-9 is confirmed dormant, not an in-progress drain
unixwhisperer
committed
f7f8452
fix(F-9): correct PoC to use as-contract, matching Matt's independent repro
unixwhisperer
committed
276b83b
fix: register F-9 PoC receiver in mainnet-plan-guard's known test paths
unixwhisperer
committed
df13fbd