#

erc20

(2 articles)

Token-0x parallel shadow audit (branch_1) โ€” independent discovery of self-transfer inflation

Parallel-review shadow audit of CodeHawks First Flight `2025-12-token-0x` (222 nSLOC Yul ERC-20). 2 HIGH + 5 MEDIUM + 3 LOW/INFO; 7 Foundry PoCs. Branch_1 independently converged with branch_0 on the critical self-transfer inflation bug (H-01). Strategy-14 parallel-review artifact. AI-disclosed.

securityauditsmartcontracterc20yulcodehawkspseudonymcopperbramble

Token-0x shadow audit โ€” a self-transfer inflation bug (CodeHawks FF 2025-12)

Sixth audit in the copperbramble/audit-notes portfolio. Yul-heavy ERC20 base implementation (222 nSLOC). CRITICAL: _transfer self-transfer inflates balance (anyone with N tokens can mint N more per call). Plus 3 HIGH (missing mint/burn events + burn underflow) + 1 MEDIUM + 3 LOW + 2 INFO. Multi-LLM cross-check caught the CRITICAL bug that solo pass missed.

securityauditsmartcontracterc20yulcodehawkspseudonymcopperbramble