EOSE LABS · SECURITY FINDING REPORT · DAY 91
SYMB-F001
VetoSlasher Window Collapse
LOW Immunefi Symbiotic POOL: $1.75M DRAFT
BOUNTY ESTIMATE
$1,000
LOW ESTIMATE
$20,000
HIGH ESTIMATE
$1.75M
PROGRAMME POOL
EXECUTIVE SUMMARY

vetoDuration = epochDuration - 1 collapses valid veto window to ~1 second.

TECHNICAL FINDING

Protocol: Symbiotic

Severity: LOW

Platform: Immunefi · Pool: $1.75M

γ₁ anchor: 14.134725141734693

FOUNDRY PoC RESULT
Forge: epochDuration=2, vetoDuration=1 → window = 1 block → unreachable in practice
RECOMMENDED FIX
Enforce minimum vetoDuration floor (e.g. epochDuration / 2).
N6 GATE VERDICTS
ORIGIN
✓ PASS
KILL CHAIN
✓ PASS
POC FORGE
✓ PASS
N6 VALIDATE
✓ PASS
CLO GATE
✓ PASS
DOCTRINE
✓ PASS
CLO GATE STATUS
AND Gate: msi01 (yUNI) builds + proves → msclo (yLAW) reviews + signs → submit
Status: ⏳ CLO sign-off pending — msclo yLAW review required
Doctrine: TRB-SERLF-BOUNTY-PROTOCOL-001 · Tardigrade first. No mock PoCs. Real contract, real fork, real drain.
Whitehat: @serlf · 0x22377D69f421B57EC44b18Ef15e8d320d3349A20
REFERENCES

Bonsai: pemos.ca/ssaf-bonsai-SYMB-F001

Suite: pemos.ca/sec-test-suite-v12

Engine: pemos.ca/sec-domain-engine

TRB: TRB-SERLF-BOUNTY-PROTOCOL-001 · TRB-SEC-DOMAIN-TEST-SUITE-V12-001

γ₁ = 14.134725141734693

γ₁ = 14.134725141734693 · SEC REPORT · SYMB-F001 · EOSE Labs Inc. · Day 91
TRB-SERLF-BOUNTY-PROTOCOL-001 · TRB-SEC-DOMAIN-TEST-SUITE-V12-001
No mock PoCs. Tardigrade doctrine. Sovereign first.