THE STELA
the finding against Intuition ProgressiveCurve · carved in stone
PROGRESSIVECURVE
— the underflow that reverts the redemption —
SEVERITY
MEDIUM · DoS
REACHABLE RANGE
[minShare+1, 1e9-1]
square(s) rounds DOWN · squareUp(sNext) rounds UP
sub(0, 1) =
PANIC
solidity 0.8 underflow · arithmetic error · redemption reverts forever
square(s)
↓ floor
squareUp(sNext)
↑ ceil
COMMIT
20181c16…2369212c9
DISCLOSED
2026-03-27 · Build 63
FIX
zero-floor guard · 8 lines
REPRODUCE
forge test --mc PoCCurveUnderflow -vvv
PR #136 was announced as the fix · the fix was incomplete · we found the gap
NODE
M