diff --git a/evidence/red-team/2026-03-20.json b/evidence/red-team/2026-03-20.json
index b5c46a9..9108ba2 100644
--- a/evidence/red-team/2026-03-20.json
+++ b/evidence/red-team/2026-03-20.json
@@ -8,7 +8,8 @@
   "eth_extracted": 0,
   "floor_held": true,
   "verdict": "floor_held",
-  "strategies_tested": 9,
+  "strategies_tested": 7,
+  "strategies_total": 9,
   "agent_runs": 2,
   "methodology": "Each attack is snapshot-isolated: Anvil snapshot before, execute strategy, measure LM total ETH via LmTotalEth.s.sol, revert to snapshot. Per-attack delta_bps reflects the isolated measurement. Top-level lm_eth_after equals lm_eth_before because all attacks were individually reverted to the clean baseline.",
   "attacks": [
@@ -38,7 +39,7 @@
       "pattern": "buy → recenter → sell",
       "result": "INCREASED",
       "delta_bps": 3746,
-      "insight": "2050 ETH far exceeds pool depth (~1000 ETH in positions), causing extreme slippage on both legs. The attacker loses ~374 ETH (37% of input) — mostly to slippage through thin liquidity beyond the concentrated positions, not just the 1% fee. The LM captures all of this as position value increase. Demonstrates that over-sized trades are self-defeating."
+      "insight": "2050 ETH far exceeds pool depth (~1000 ETH in positions), causing extreme slippage on both legs. The attacker loses ~374 ETH (~18% of input) — mostly to slippage through thin liquidity beyond the concentrated positions, not just the 1% fee. The LM captures all of this as position value increase. Demonstrates that over-sized trades are self-defeating."
     },
     {
       "strategy": "Stake to change optimizer params → exploit repositioning",