Devcon Archive logo
Devcon Devconnect Forum Blog
  • Watch
  • Event
    Event: background logo
    • Devcon 7
    • Devcon 6
    • Devcon 5
    • Devcon 4
    • Devcon 3
    • Devcon 2
    • Devcon 1
    • Devcon 0
    • Devconnect ARG
  • Categories
    Categories: background logo
    • Cryptoeconomics
    • Devcon
    • Developer Experience
    • Coordination
    • Core Protocol
    • Layer 2s
    • Real World Ethereum
    • Cypherpunk & Privacy
    • Security
    • Applied Cryptography
    • Usability
  • Playlists

Suggested

Loading results..

View all

About Devcon —

Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.

An intensive introduction for new Ethereum explorers, a global family reunion for those already a part of our ecosystem, and a source of energy and creativity for all.

  • Watch
  • Devcon
  • Devconnect
  • Forum
  • Blog

Get in touch

devcon@ethereum.org

Subscribe to our newsletter

Crafted with passion ❤️ at the Ethereum Foundation

© 2026 — Ethereum Foundation. All Rights Reserved.

devconnect arg / adversarial erc 4626 how vault share manipulation still bypasses listing screens in 2025

  • YouTube
  • Details

Adversarial ERC-4626: How Vault-Share Manipulation Still Bypasses Listing Screens in 2025

Duration: 00:20:57

Speaker:

Type: Talk

Expertise:

Event: Devcon

Date: Jul 2026

0xmonsoon, Security Researcher, OpenZeppelin LST/LRT wrappers, points-tokens, and restaked derivatives are exploding. ERC-4626 is the default envelope. Attack surface is bigger now than before. Oracle teams and risk committees rely on previewDeposit/previewMint as if they were binding promises. They aren’t. Many “checks” are unit-tests that don’t model donations, flash liquidity, or time-dependent exchange rates. https://defisecuritysummit.org/schedule