Known-exploit function-selector replay

Evidence summary #

T-09 v2-deferred signal. No active known-exploit-template selector replay targeting Stake DAO core contracts detected. The Zunami exploit used SDT pool slippage via Sushiswap to manipulate Zunami's totalHoldings() price function — the exploit selector targets Zunami's oracle path, not Stake DAO's contracts. Stake DAO's liquid locker contracts are not the target of any documented active replay pattern. Morpho lending vault modules use standard Chainlink feeds with normal deviation thresholds.

Sources #

Methodology #

Detect whether a call-pattern matches a known-exploit replay template (specific selector sequence and calldata shape) against this protocol.

See the full factor methodology and distribution across all protocols →