Discussion - Security 2, Session 9
summary
A live panel reports that a modeled Aave-style liquidation attack checks out as not practically viable after running MCMC-style simulations over on-chain borrower and lender states, sampling worst-case LP pull scenarios; underwriters are told formulas aren’t production-ready. Defenses discussed include median+backup cross-check TWAPs and liquidity rebalancing in concentrated pools, while testing relies on manual bug injection and mutation testing to catch bitwise, sender and logic errors.
AI-written summary · about
chapters (10)
- 0:00Security panel introduction
- 1:04Attack scenarios analysis
- 2:06Bug injection systems
- 3:10TWAP oracle vulnerabilities
- 5:41Secure oracles in AMM
- 6:45Liquidity rebalancing
- 7:46Insurance pricing challenges
- 9:10Attack probability simulations
- 11:41Ineffective smart contract practices
- 15:36Governance token critique
related talks
39mThe challenges of building, scaling and securing DeFi protocols
01h 04mLive AMA with Stani
11mA deep dive into DeFi liquidations
01h 33mWhite Hat Panel: DeFi Exploits
25mCommSec D2 - Smart Contract (In)Security
16mExploring Attacks in the Modular Rollup World
31mRestaking Risks with
18mCross chain Intent + Account Abstraction Audit & Threat Modeling