Raj Lathigra

ERC 4626 Inflation attack

ERC-4626 vaults price shares against assets using a simple ratio: totalAssets() / totalSupply(). That ratio is meaningless the moment a vault is empty, because whoever deposits first gets to set it. This project is a self-contained Foundry demonstration of the resulting "inflation attack," a working exploit against a deliberately naive vault, two production-grade fixes, and a fuzz suite that stress-tests both across a wide input range.

View details