In August, an attacker bypassed Moonwell’s MAMO supply cap in an $8.7M exploit.
After the attack, we ran AutoProver on the pre-attack code. The Certora Prover found a violation of the generated property.
In our latest blog,
@AliceAndB0b breaks down the attack, the rule that catches it, and a proposed fix the Prover verifies. ⬇️