The standard Code4rena approach: write bug reports, compete against dozens of wardens, collect severity points. The V13 approach: every Solidity vulnerability maps to an organ failure in ME-COLI. The V13 lens makes that mapping explicit — and it changes how you write the finding. A flash loan attack framed as "L4 metabolic manipulation where the attacker controls the metabolic rate" is a different class of submission than "attacker inflates share price."
Novel framing + systemic reuse + PEMCLAU-validated analysis = higher KCF, higher severity assignment, better payout ratio.
ERC-4626 vaults are metabolic substrates. Share price = the metabolic rate. The vault's totalAssets() / totalShares() ratio IS the metabolic rate of the organism. When an attacker manipulates this ratio, they are performing metabolic surgery — redirecting nutrient flow to themselves.
Intuition MultiVault case: Multi-vault architecture = organism with multiple metabolic chambers. Each chamber (vault) has independent share price. Cross-vault interactions create metabolic rate arbitrage. The V13 organ map reveals attack vectors invisible to a standard ERC-4626 security checklist.
ZK proof validity = the Wormhole finality problem in math form. A ZK proof that is accepted as valid while not actually complete = a bridge that finalises a transaction before consensus. Both are L2 identity failures: "is this thing what it claims to be?"
| Contest | Pool | V13 KCF | VSM | ME-COLI | Fleet Lesson |
|---|---|---|---|---|---|
| GMX-Solana | $200K | 9 | S4 | L4/L6 | Oracle = S4 intelligence · SSAF continuity |
| Succinct | $150K | 9 | S4 | L2 | Proof completeness = identity · Math parallel |
| Moonwell | $250K | 8 | S3 | L4 | Lending rate = metabolic flow · L4 control |
| Intuition | $100K | 8 | S3 | L4 | MultiVault = metabolic chambers · ERC-4626 |
| Legion | $80K | 7 | S5 | L5 | Access control = S5 policy gate · H1 parallel |