DeFi Security
PoC index
Which analysed incidents have a public reproduction file in the reference dataset. Status, path and stored commit. ThreatWire has never executed any of these tests.
Public PoC available
0
A public proof-of-concept is listed. A link or README entry alone is not evidence that anything is exploitable.
Test or reproduction identified
6
A test file for this incident exists in the reference dataset at the stored commit. We read its header only and did not run it.
Reproduction independently validated
0
Someone other than the repository author confirmed the reproduction, and we hold that confirmation. Nothing is in this state yet.
Repository unavailable
0
The dataset or the file could not be retrieved in the reference dataset at the stored commit.
Verification pending
0
An entry is listed but the file was not found in the reference dataset at the stored commit, or we have not checked it yet.
Recorded entries
KolanHook: an unbounded buyback settled at a manipulated spot price
Test or reproduction identified · Foundry · src/test/2026-10/KolanHook_exp.sol · commit 7363f76db51f · file licence UNLICENSED · retrieved 2026-10-19
UNCX Vesting V2: share records and token balance made to disagree
Test or reproduction identified · Foundry · src/test/2026-10/UNCXSmartTokenVesting_exp.sol · commit 7363f76db51f · file licence MIT · retrieved 2026-10-19
FlashLoopAdapter: a spoofable caller check in a Safe module
Test or reproduction identified · Foundry · src/test/2026-10/FlashLoopAdapter_exp.sol · commit 7363f76db51f · file licence UNLICENSED · retrieved 2026-10-19
Notional V1: integer overflow in a deprecated escrow contract
Test or reproduction identified · Foundry · src/test/2026-09/NotionalFinance_exp.sol · commit 7363f76db51f · file licence UNLICENSED · retrieved 2026-10-19
Term Finance: governance takeover of strategy vaults
Test or reproduction identified · Foundry · src/test/2026-08/TermFinance_exp.sol · commit 7363f76db51f · file licence UNLICENSED · retrieved 2026-10-19
MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
Test or reproduction identified · Foundry · src/test/2026-10/MakerDAOFlipKeeper_exp.sol · commit 7363f76db51f · file licence MIT · retrieved 2026-10-19
Dataset provenance
SunWeb3Sec/DeFiHackLabs · Foundry · repository licence Apache-2.0. Test files carry their own SPDX header, often UNLICENSED or MIT. Only metadata is stored here, never file contents. Attribution is kept in the repository NOTICE file.