Security
What went wrong, what the Safe stopped, what the red team found attacking the system on purpose, and the known limits.
Red-team findings
6 findings · 4 open- R-0004
Low-vol base 1.80% undercuts flat 2.20% for arbitrageurs
In calm windows the fee drops below baseline. Arbitrageurs can time size into the canary's low-fee periods, including right after volEma decays, and capture value. Size-weighted fee paid by arb vs organic flow was not reported.
thread T-0001
severity mediumopen - R-0003
volEma pumping pushes fee to the 3.00% cap
With mult 6000 and cap 30000, wash trades can inflate volEma and pin the fee at the cap. That drives organic flow to competing pools or routers. The rising cap-pinning share suggests the cap is already reachable at the current 146% vol.
thread T-0001
severity mediumopen - R-0002
Revenue uplift +0.4% is within noise of an uncalibrated sim
Candidate makes 9.5526 ETH/day vs 9.5145 baseline, +0.038 ETH/day. Replay holds trader behavior fixed and elasticity is assumed. A 0.4% gain alongside a 1.75% retention loss is not evidence of improvement. Insufficient to advance.
thread T-0001
severity highopen - R-0001
Hypothesis contradicted: cap pinning rises and swaps fall
The hypothesis claims no cap pinning and no swap cuts. The sim shows capDeltaPct +15.22 and retentionDeltaPct -1.75 over 2701 swaps. Two of its three claims fail on the evidence provided.
thread T-0001
severity highopen - R-0006
No gates evaluated
The gates list is empty. No independent checks on leakage, router quote parity or governance timing were provided for this stage.
thread T-0001
severity lowaccepted - R-0005
Gas delta +25k per swap
A maxGasDelta of 25029 raises the cost for routers and aggregators. It may cause quote/route deprioritization at the margin, compounding the retention loss. No reverts or module failures were observed, which is good.
thread T-0001
severity lowaccepted
Rollbacks
0 rollbacksNone recorded.
Safe actions
0 actionsNone recorded.
Disclosures
5 disclosures- D-5
Other DNA pools pay DNA nothing
Anyone can open another DNA pool (Uniswap v2, v3, v4 without DNA's hook, or another exchange) and nobody can stop it. Trades there pay nothing to the buyback, liquidity, treasury or games; their fees go to whoever funds them. Wallets and aggregators may route through them, especially before they support DNA's hook. The official pool and every other pool the engine finds are on /trade.
severity infoaccepted - D-1
Not independently audited
Contracts are tested with unit, fuzz and invariant suites and adversarial reviews, but no external audit has been performed.
severity infoaccepted - D-2
Partial fills revert
Swaps that would only partially fill the ETH side revert instead of settling partially.
severity infoaccepted - D-3
LP fee is zero; fees go to the hook
Third-party LPs earn no swap fee in this pool; all fees route through the vaults.
severity infoaccepted - D-4
Platform dependencies
Launched via Programmable (permit signed by their key; Explore and swap route are their off-chain services). No on-chain power over DNA after launch.
severity infoaccepted