@ZeroCool_AI

AI + human hybrid security systems for the cyborg era. Trusted by @Uniswap, @YearnFi, @yAuditDAO and more!

zerocool.ai
Joined July 2025
  • Tweets280
  • Following2
  • Followers1.3K
64Media

Paired functions are a gold Mine in security reviews (Part 1)

Smart contracts are full of functions that come in pairs, i.e., lock/unlock, mint/burn, borrow/repay, stake/unstake. This pattern appears across almost every DeFi protocol, including position-based sy…

Article · @ZeroCool_AI
4
4
38
1,699

BridgeManager mis-prices tickets using the global price instead of the current drawing snapshot

This issue was found by Zero Cool in the Megapot contest on Code4rena(RIP). It stems from JackpotBridgeManager calculating the ticket cost from a price the owner can change at any time, instead of the…

Article · @ZeroCool_AI
1
10
705

TWAP queries are undercharged because "periods" is hardcoded to 1.

Zero Cool found this issue in Reflector V3, a decentralized price feed oracle for Stellar DeFi smart contracts. The codebase is written in Rust and is built to support derivatives, lending and asset m…

Article · @ZeroCool_AI
1
1
18
1,076

Beam overcharges for multi-record reads using unbounded records

In this article, we break down a vulnerability in the Rust-based Reflector V3’s Beam contract that causes the oracle to charge for scales it never executes.

Article · @ZeroCool_AI
2
14
811

Zero Cool Takes First Place in Sherlock's Ripple XRPL Lending Protocol Engagement

When Sherlock announced the AI-only Audit Engine review for Lending Protocol V1.1 for the XRP Ledger, we were eager to see how Zero Cool would hold up against the codebase. The engagement was not exac…

Article · @ZeroCool_AI
1
14
709

Jevscan: Continuous On-Chain Monitoring

TL;DR: We created a block scanning tool with Jev and benchmarked it against 60 historical hacks. It scanned 36,357 transactions and flagged 56 of the 60 (93.3%) with only 21 potential false positives …

Article · @ZeroCool_AI
6
3
3
49
6,629

Missing access control in set_invocation_costs_config allows arbitrary fee manipulation

Reflector is a decentralized price feed oracle for Stellar DeFi smart contracts, written in Rust and built to support derivatives, lending, and asset management protocols. When fee collection is enabl…

Article · @ZeroCool_AI
12
1,149

Buffered-fee cross-chain unstake reverts due to strict native fee equality

The UnstakeMessenger contract exposes a cross-chain unstake() entrypoint that sends a LayerZero message from a spoke chain to a hub chain. To make integrations safer, the contract provides buffered fe…

Article · @ZeroCool_AI
1
2
1
23
1,377

How we scan large DLT codebases without getting buried

Large distributed ledger technology codebases are some of the hardest systems to review with AI. A repository might contain hundreds or thousands of files spread across consensus, networking, storage,…

Article · @ZeroCool_AI
2
6
1
67
3,265

Rewards claimed during deallocation remain stranded on strategy

This finding was identified by Zero Cool during the @AlchemixFi V3 audit competition on Immunefi. The issue arises from how TokeAutoEthStrategy interacts with the Tokemak rewarder. The reward tokens…

Article · @ZeroCool_AI
1
10
494

How we reduce false positives in AI security reviews

If you run security reviews with AI tools, you can definitely tell how often they turn unverified edge cases, intentional design decisions, or incomplete attack paths into noisy findings that ultimate…

Article · @ZeroCool_AI
3
4
2
43
5,631

Oracle sqrt ratio ignores token decimals, leading to misvaluation of LP collateral.

This finding is 1/2 of the high-severity findings submitted by Zero Cool in the  VII-Finance-Contracts contest. Accurate valuation of Uniswap positions depends on consistent price representation acr…

Article · @ZeroCool_AI
8
1
20
1,594
Load more