Disclosed vulnerability writeups and audit notes.https://vielite.github.io/https://vielite.github.io/blog/2026/admin-invariant-bypass-via-grantrole/https://vielite.github.io/blog/2026/admin-invariant-bypass-via-grantrole/Manual admin-count tracking can desynchronize from the real role set.Tue, 07 Apr 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/scatter-read-bypass-of-concurrent-read-limit/https://vielite.github.io/blog/2026/scatter-read-bypass-of-concurrent-read-limit/Scatter reads bypass the intended IO throttling path.Mon, 06 Apr 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/unsafe-downcast-of-uint256-to-uint8/https://vielite.github.io/blog/2026/unsafe-downcast-of-uint256-to-uint8/Week accounting can silently wrap after 255 weeks.Sun, 05 Apr 2026 12:00:00 GMThttps://vielite.github.io/blog/2026/potential-identity-misbinding-in-raptorcast/https://vielite.github.io/blog/2026/potential-identity-misbinding-in-raptorcast/Embedded validator identifiers are trusted more than the authenticated sender.Sun, 05 Apr 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/silent-failure-in-handle-agent-taxes/https://vielite.github.io/blog/2026/silent-failure-in-handle-agent-taxes/The settlement leg can fail while accounting still advances.Sat, 04 Apr 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-01-no-deduplication-of-peers/https://vielite.github.io/blog/2026/monad-qa-01-no-deduplication-of-peers/Duplicate node IDs in ConfirmGroup can force redundant sends.Thu, 02 Apr 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-02-deterministic-rng-in-blocksync/https://vielite.github.io/blog/2026/monad-qa-02-deterministic-rng-in-blocksync/A fixed RNG seed makes peer selection predictable across runs.Wed, 01 Apr 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-03-invalid-peer-data-without-penalty/https://vielite.github.io/blog/2026/monad-qa-03-invalid-peer-data-without-penalty/Peers can trigger expensive verification and remain eligible for reselection.Tue, 31 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-04-empty-validator-set/https://vielite.github.io/blog/2026/monad-qa-04-empty-validator-set/A zero-stake validator set can be constructed from empty input.Mon, 30 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-05-positional-trailing-fields/https://vielite.github.io/blog/2026/monad-qa-05-positional-trailing-fields/Trailing optional fee fields are decoded by position rather than presence flags.Sun, 29 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-06-unchecked-subtraction/https://vielite.github.io/blog/2026/monad-qa-06-unchecked-subtraction/A zero execution delay can trigger a panic in the threshold comparison.Sat, 28 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-07-future-round-votes/https://vielite.github.io/blog/2026/monad-qa-07-future-round-votes/Votes for arbitrary future rounds can accumulate without a hard upper bound.Fri, 27 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-08-txpool-admission-ignores-solvency/https://vielite.github.io/blog/2026/monad-qa-08-txpool-admission-ignores-solvency/The txpool can admit insolvent transactions.Thu, 26 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-09-late-version-validation/https://vielite.github.io/blog/2026/monad-qa-09-late-version-validation/Wrong-version messages still incur expensive nested decoding work.Wed, 25 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-10-eip1559-tfm-doc-mismatch/https://vielite.github.io/blog/2026/monad-qa-10-eip1559-tfm-doc-mismatch/Documentation and configuration disagree on TFM support.Tue, 24 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-11-traverse-callback-memory-leak/https://vielite.github.io/blog/2026/monad-qa-11-traverse-callback-memory-leak/Traversal callbacks copy key and value buffers without finalizing FFI allocations.Mon, 23 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-12-order-assumption-nonces/https://vielite.github.io/blog/2026/monad-qa-12-order-assumption-nonces/The nonce path assumes backend result ordering without requiring it.Sun, 22 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-13-unconditional-timer-reset/https://vielite.github.io/blog/2026/monad-qa-13-unconditional-timer-reset/Unknown sequence numbers can still pace the preload timer.Sat, 21 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-qa-14-event-ring-copy-leak/https://vielite.github.io/blog/2026/monad-qa-14-event-ring-copy-leak/The function copies descriptor content before validating the sequence number.Fri, 20 Mar 2026 00:00:00 GMThttps://vielite.github.io/blog/2026/monad-c-01-hardcoded-global-hasher-type/https://vielite.github.io/blog/2026/monad-c-01-hardcoded-global-hasher-type/A globally hardcoded Blake3 type makes future hash migration brittle.Thu, 19 Mar 2026 00:00:00 GMT