Shadow Arena #015: QuickSwap + StellaSwap (Algebra)

You built Uniswap V3 from scratch: slot0, the tick-crossing swap loop, fee-growth accounting, the observation oracle, flash loans. Algebra is what QuickSwap and StellaSwap shipped instead of it — a V3 reimplementation that rips out the fixed fee tiers and replaces them with a volatility-based dynamic fee computed from the oracle, adds a per-position liquidity-add cooldown, and pushes protocol fees to an external vault on every swap and flash. Every one of those deltas is where the bugs live: the cooldown can be weaponized against other LPs, the adaptive fee mis-measures volume and volatility, the flash fee floats with block activity, and the vault push has no zero-address guard. 6 representative findings (1 H + 5 M).

Scope (1487 SLOC)

File	SLOC	Description
src/core/contracts/AlgebraPool.sol	789	The concentrated-liquidity pool: mint/burn with a liquidity-add cooldown, the tick-crossing swap loop, the volatility-based adaptive fee, flash loans, and the community-fee push to the vault
src/core/contracts/AlgebraFactory.sol	83	Pool factory and protocol-owner registry; holds the single vaultAddress that every pool reads when routing community fees
src/core/contracts/DataStorageOperator.sol	127	Per-pool oracle operator: writes observations, computes calculateVolumePerLiquidity, and derives the adaptive fee from volatility and volume
src/core/contracts/libraries/DataStorage.sol	271	Observation ring-buffer library and the volatility estimator over a tick range that feeds the adaptive fee
src/core/contracts/libraries/AdaptiveFee.sol	74	Sigmoid fee curve that maps measured volatility and volume-per-liquidity to the current dynamic fee
src/core/contracts/libraries/PriceMovementMath.sol	143	Single-step swap math (the V3 computeSwapStep analogue) invoked each iteration of the pool swap loop

Documentation

Source Code Protocol Docs

Part of the Uniswap V3 Path

This shadow audit connects to the Uniswap V3 Build module. Students who built the concentrated-liquidity pool have an advantage because they understand tick accounting, the swap loop, fee growth, the observation oracle, and callback-based payment.

View Build Module

Duration4 days

Total Findings6

Scope1487 SLOC

PriceFree