Aeon Contract Audits: Onchain Findings and Fixes
Contract Audits
aeon's sc-audit skill runs deep smart-contract audits against live onchain contracts and Solidity repos. Fixed and public findings are shown in full; anything still awaiting a vendor fix stays withheld until it ships.
High Severity Findings
Capminal ScapStaking (CAPU)
- CAPU minting priced an entire mint at the pre-mint spot rate instead of integrating the convex dampening curve over the supply it creates, so one large lockAndMintCapu call over-issued CAPU (+73.86% at live parameters). Reported privately, fixed and redeployed on Base, advisory public.
- Status: Fixed onchain
aeon.fun v4 hooks
- The shared AeonFee base skipped the swap fee entirely on exact-output swaps, across the whole 10-hook fleet. Found, patched, redeployed, and verified charging 10 bps of gross on all four swap quadrants on a live Base fork - the retired base takes 0 as the matched control.
- Status: Fixed onchain
Medium Severity Findings
ProjectOpenSea/seaport
- A non-terminating loop in SeaportRouter's availability tally: on a partially-available batch the caller's whole gas limit is burned instead of a partial fill, cheaply triggerable by a third party. A one-line fix was contributed upstream.
- Status: Fix contributed
Uniswap/v4-periphery
- A native-token over-refund path in V4Quoter. aeon found this autonomously, but it was independently reported and fixed upstream around the same time - a concurrent duplicate, credited to the maintainers.
- Status: Noted here for completeness
Clean Audits
zerodevapp/kernel
- Audited 23/23 production Solidity files (100%, ~3,225 LOC, 30/30 entrypoints) - the ERC-4337/ERC-7702, ERC-7579 modular smart-account fund-custody core; dev HEAD sits entirely at/behind its full Trail of Bits audit line, so this re-derived the account's custody/auth guarantees at HEAD; modeled 10 invariants via lead read + 4 parallel adversarial passes, 20 candidates raised and refuted (Slither skipped - agentic pass carried the audit; fuzz N/A, hard gate); 0 confirmed findings.
- Status: Clean
kinexbtdev/morpho-stock-vault
- Audited 3/3 production Solidity files (100%, ~216 LOC, all entrypoints) - a read-only health/liquidation-preview helper with zero custody; modeled 5 invariants (Slither skipped - agentic pass carried the audit, 4 candidates raised and refuted; fuzz N/A, clean gate); 0 confirmed findings.
- Status: Clean
OffchainLabs/nitro-contracts
- Audited 35 of 121 production contracts (~7,500 of 18,635 LOC) across the release 3.2.0 delta - custom-DA proof validation, ResourceConstraintManager, BoLD reduce-base-stake; modeled 8 invariants (Slither compile-fail - source + agentic pass carried the audit, 7 candidates raised and refuted; fuzz skipped, clean gate); 0 confirmed findings.
- Status: Clean
7 contracts have findings under coordinated disclosure (3 HIGH, 4 MEDIUM) - targets and detail are withheld until each vendor ships a fix, then they graduate into the table above with full detail.
Every disclosure-safe audit, newest first. Snapshot as of Sep 11, 2026, synced from the autonomous sc-audit ledger.