Security case library

Prototype incident catalog

Search and filter fictional incident dossiers by classification, replay label, assessment level, difficulty, and verification state.

Prototype Content

Fictional data used to validate the TraceFi interface. This is not a real security incident.

Case library controls

4 prototype cases shown

SearchSortChainIncidentNatureOccurrenceStatusIncidentClassVulnerability categoryDifficultyRootCauseStatusAssessmentLevelReplay typeReplay statusVerification status

Case library controls

4 prototype cases shown

SearchSortChainIncidentNatureOccurrenceStatusIncidentClassVulnerability categoryDifficultyRootCauseStatusAssessmentLevelReplay typeReplay statusVerification status

Prototype Content

Occurrence: ConfirmedRoot cause: ConfirmedAssessment: Confirmed

Aster Vale Vaults

Share Accounting Drift In A Fictional Vault

A fictional vault mints shares from a stale asset balance after a fee path changes total assets without refreshing the denominator, creating a proportional-accounting failure.

Violated invariant

A deposit must not mint more shares than the depositor's proportional claim on current vault assets.

Class: Smart Contract Implementation Bug
Difficulty: Intermediate
Time: 55 minutes
Replay: Foundry Local Reproduction / Available
Chain: EVM Prototype Chain
Date: 2026-02-12

Verification: Technically ReviewedOpen dossier

Fictional data used to validate the TraceFi interface. This is not a real security incident.

Prototype Content

Occurrence: ConfirmedRoot cause: UnconfirmedAssessment: Probable

Lumen Polder Markets

Observation Window Skew In A Fictional Oracle

A fictional market reads a short observation window during a volatile synthetic price sequence, producing a probable oracle-manipulation lesson without executable replay.

Violated invariant

A collateral decision should not depend on an observation window that can be dominated by one synthetic price movement.

Class: Oracle Manipulation
Difficulty: Advanced
Time: 40 minutes
Replay: Transaction Trace Visualization / Available
Chain: EVM Prototype Chain
Date: 2026-03-18

Verification: ReviewedOpen dossier

Fictional data used to validate the TraceFi interface. This is not a real security incident.

Prototype Content

Occurrence: Research OnlyRoot cause: UnconfirmedAssessment: Highly Probable

Bridgewright Relay

Cross-domain Message Validation Weakness

A fictional research disclosure models a cross-domain receiver that validates message shape but not the expected origin domain.

Violated invariant

A privileged cross-domain message must bind sender, origin domain, destination domain, and payload intent.

Class: Bridge / Cross-chain Bug
Difficulty: Expert
Time: 50 minutes
Replay: Static Code Walkthrough / Available
Chain: EVM Prototype Chain, Synthetic Rollup Domain
Date: 2026-04-09

Verification: ReviewedOpen dossier

Fictional data used to validate the TraceFi interface. This is not a real security incident.

Prototype Content

Occurrence: ConfirmedRoot cause: ConfirmedAssessment: Confirmed

Cinder Signer Desk

Signer Credential Compromise In A Fictional Operations Flow

A fictional operations case separates signer compromise from smart-contract bugs and shows why replay may be unavailable.

Violated invariant

A single compromised signer credential must not be sufficient to authorize sensitive operational movement.

Class: Private Key or Signer Compromise
Difficulty: Introductory
Time: 25 minutes
Replay: Replay Unavailable / Unavailable
Chain: EVM Prototype Chain
Date: 2026-05-04

Verification: Technically ReviewedOpen dossier

Fictional data used to validate the TraceFi interface. This is not a real security incident.

Loading catalog controls...