johba/harb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

evidence: fix nits — strategies count, percentage calculation

Browse source 
- strategies_tested=7 (independent measurements only), strategies_total=9
- Fix attack 4 percentage: 374/2050 ≈ 18%, not 37%

Re: #1058

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
johba 2026-03-21 06:45:40 +00:00
parent 443593e66f
commit fd80aec3be
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
evidence/red-team/2026-03-20.json
View file

@ -8,7 +8,8 @@
"eth_extracted": 0, "eth_extracted": 0,
"floor_held": true, "floor_held": true,
"verdict": "floor_held", "verdict": "floor_held",
"strategies_tested": 9, "strategies_tested": 7,
"strategies_total": 9,
"agent_runs": 2, "agent_runs": 2,
"methodology": "Each attack is snapshot-isolated: Anvil snapshot before, execute strategy, measure LM total ETH via LmTotalEth.s.sol, revert to snapshot. Per-attack delta_bps reflects the isolated measurement. Top-level lm_eth_after equals lm_eth_before because all attacks were individually reverted to the clean baseline.", "methodology": "Each attack is snapshot-isolated: Anvil snapshot before, execute strategy, measure LM total ETH via LmTotalEth.s.sol, revert to snapshot. Per-attack delta_bps reflects the isolated measurement. Top-level lm_eth_after equals lm_eth_before because all attacks were individually reverted to the clean baseline.",
"attacks": [ "attacks": [
@ -38,7 +39,7 @@
"pattern": "buy → recenter → sell", "pattern": "buy → recenter → sell",
"result": "INCREASED", "result": "INCREASED",
"delta_bps": 3746, "delta_bps": 3746,
"insight": "2050 ETH far exceeds pool depth (~1000 ETH in positions), causing extreme slippage on both legs. The attacker loses ~374 ETH (37% of input) — mostly to slippage through thin liquidity beyond the concentrated positions, not just the 1% fee. The LM captures all of this as position value increase. Demonstrates that over-sized trades are self-defeating." "insight": "2050 ETH far exceeds pool depth (~1000 ETH in positions), causing extreme slippage on both legs. The attacker loses ~374 ETH (~18% of input) — mostly to slippage through thin liquidity beyond the concentrated positions, not just the 1% fee. The LM captures all of this as position value increase. Demonstrates that over-sized trades are self-defeating."
}, },
{ {
"strategy": "Stake to change optimizer params → exploit repositioning", "strategy": "Stake to change optimizer params → exploit repositioning",