Shadow Arena #018: Panoptic

You built the Uniswap V3 concentrated-liquidity engine from scratch. Panoptic is not a fork of it — it is the layer that got shipped on top. Its SemiFungiblePositionManager mints and burns REAL Uniswap V3 liquidity as ERC-1155 option legs, turning your pool, position, and fee-growth machinery into a perpetual options market. That means the bugs live in the seam: code that drives the pool you wrote, reads the oracle you wrote, and deploys through the factory you wrote — but adds premium settlement, collateral shares, and CREATE2 pool cloning on top. This is the next layer up. 5 representative findings (2 H + 3 M).

Scope (4378 SLOC)

File	SLOC	Description
contracts/SemiFungiblePositionManager.sol	724	The integration core: mints/burns REAL Uniswap V3 liquidity via the pool's mint/burn/swap callbacks and wraps each leg as an ERC-1155 token. This is your V3 pool driven from one layer up.
contracts/PanopticPool.sol	1162	Options engine: opens/closes positions, accrues and settles premium, runs solvency (validateSolvency) and position-list validation
contracts/CollateralTracker.sol	792	ERC-4626-style collateral vault: mint/deposit/withdraw shares, commission (MEV) tax, and exercise() which debits/credits premium on settlement
contracts/PanopticFactory.sol	249	Deploys a PanopticPool + CollateralTrackers for a given Uniswap V3 pool via Clones.cloneDeterministic (CREATE2), seeding a full-range position at deployment
contracts/libraries/PanopticMath.sol	573	Shared math: TWAP/tick helpers, position-hash fingerprinting (updatePositionsHash), premium and liquidity conversions
contracts/libraries/Math.sol	417	Low-level fixed-point math: mulDiv, mulDivRoundingUp, mulDiv96, sqrtPrice/tick conversions — the same primitives you wrote in the module
contracts/types/TokenId.sol	305	Packed position identifier: encodes up to 4 option legs (strike, width, tokenType, long/short) into a single uint256
contracts/types/LeftRight.sol	156	Packed signed/unsigned pair type used to carry token0/token1 amounts and premium in one word (rightSlot/leftSlot)

Documentation

Source Code Protocol Docs

Part of the Uniswap V3 Path

This shadow audit connects to the Uniswap V3 Build module. Students who built the concentrated-liquidity pool have an advantage because they understand tick accounting, the swap loop, fee growth, the observation oracle, and callback-based payment.

View Build Module

Duration7 days

Total Findings5

Scope4378 SLOC

PriceFree