Shadow Arena #016: Ramses Exchange V3

You built Uniswap V3 from scratch. Ramses V3 is a near-verbatim v3-core fork that shipped on Arbitrum with two surgical changes: it replaced V3's bit-packed feeProtocol denominator with a plain percentage, and it wove per-period active-liquidity reward accounting (positionPeriodSecondsInRange) through Tick, Position, and Oracle to feed a ve(3,3) GaugeV3. Every bug in this arena lives exactly where a canonical-V3 assumption met one of those two changes and silently broke. 4 representative findings (2 M + 2 L).

Scope (2480 SLOC)

File	SLOC	Description
contracts/CL/core/RamsesV3Pool.sol	720	The concentrated-liquidity pool: swap loop, mint/burn/collect, flash(), and the per-period accounting hooks (_advancePeriod, positionPeriodSecondsInRange) that feed the gauge
contracts/CL/core/libraries/Oracle.sol	320	Observation ring buffer plus the secondsPerLiquidity accumulator that Ramses extends with per-period endSecondsPerLiquidityPeriodX128 snapshots
contracts/CL/core/libraries/Position.sol	180	Position fee-growth bookkeeping, extended to track per-period seconds-in-range for reward accrual
contracts/CL/core/libraries/Tick.sol	260	Tick-boundary liquidity bookkeeping, extended with period-keyed secondsPerLiquidityOutside snapshots
contracts/CL/core/RamsesV3Factory.sol	190	Pool factory and protocol-fee configuration where feeProtocol is defined as a percentage (0-100), not the canonical bit-packed denominator
contracts/CL/gauge/GaugeV3.sol	380	ve(3,3) gauge: reads positionPeriodSecondsInRange from the pool via staticcall and converts it into per-period reward amounts
contracts/CL/periphery/NonfungiblePositionManager.sol	430	NFT position manager: mint/increase/decrease/collect wrappers, accumulating tokensOwed0/1 from pool fee growth

Documentation

Source Code Protocol Docs

Part of the Uniswap V3 Path

This shadow audit connects to the Uniswap V3 Build module. Students who built the concentrated-liquidity pool have an advantage because they understand tick accounting, the swap loop, fee growth, the observation oracle, and callback-based payment.

View Build Module

Duration4 days

Total Findings4

Scope2480 SLOC

PriceFree