Zealynx(@ZealynxSecurity):Solidity integer division truncates toward zero. The Uniswap V3 tick bitmap needs floor division. For positive ticks, those are the same. For negative ticks, they are not. Get it wrong and a swap moving down through negative territory hunts for the next tick on the wrong side of the price. It is a recurring bug class in forks that "simplify" the library.

Zealynx

@ZealynxSecurity

Blockchain & AI Security firm | Web3 Membership | Book a Smart Contract Audit (Solidity, Rust, TypeScript)

加入 April 2024

260 正在關注 1.5K 粉絲

Zealynx@ZealynxSecurity

2026.08.29 12:00

Solidity integer division truncates toward zero. The Uniswap V3 tick bitmap needs floor division. For positive ticks, those are the same. For negative ticks, they are not. Get it wrong and a swap moving down through negative territory hunts for the next tick on the wrong side of the price. It is a recurring bug class in forks that "simplify" the library.