Devcon Archive logo
Devcon Devconnect Forum Blog
  • Watch
  • Event
    Event: background logo
    • Devcon 7
    • Devcon 6
    • Devcon 5
    • Devcon 4
    • Devcon 3
    • Devcon 2
    • Devcon 1
    • Devcon 0
    • Devconnect ARG
  • Categories
    Categories: background logo
    • Cryptoeconomics
    • Devcon
    • Developer Experience
    • Coordination
    • Core Protocol
    • Layer 2s
    • Real World Ethereum
    • Cypherpunk & Privacy
    • Security
    • Applied Cryptography
    • Usability
  • Playlists

Suggested

Loading results..

View all

About Devcon —

Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.

An intensive introduction for new Ethereum explorers, a global family reunion for those already a part of our ecosystem, and a source of energy and creativity for all.

  • Watch
  • Devcon
  • Devconnect
  • Forum
  • Blog

Get in touch

devcon@ethereum.org

Subscribe to our newsletter

Crafted with passion ❤️ at the Ethereum Foundation

© 2026 — Ethereum Foundation. All Rights Reserved.

devcon8 / every division picks a winner rounding and accounting hazards in lending protocols

  • YouTube
Every Division Picks a Winner: Rounding and Accounting Hazards in Lending Protocols preview
  • Details

Every Division Picks a Winner: Rounding and Accounting Hazards in Lending Protocols

Duration: NaN:NaN:NaN

Speaker: Dhairya Sethi, Tomer Ganor

Type: Talk

Expertise: Some familiarity with the topic

Event: Devcon

Date: Nov 2026

This talk dissects two findings from the published Aave V4 security reviews and generalises them into a hazard class carried by every share-based protocol. First: fee computation rounds down at three points, and view functions simulate what accrue() later realises, so observed share price can drop, breaking the monotonicity invariant. Second: fees that participate in liquidity before being realised as shares earn interest that flows to shareholders, so share price grows faster than the interest rate itself, effectively unbounded around asset listing and off-boarding. Neither is the familiar first-depositor inflation attack. Both trace back to fee collection, the most routine mechanism in DeFi. With ERC-4626 vaults now the default for lending markets, LSTs, and yield products, integrators everywhere consume exchange rates built on these assumptions. Attendees leave with testable invariants, fuzzing properties, and an integration checklist.

Categories

DeFiSecurity