Shadow Arena #019: Real Wagmi

Real Wagmi's leverage engine does not fork Uniswap V3 — it borrows against the very V3 positions you learned to mint. LPs deposit concentrated-liquidity NFTs, borrowers rent that liquidity, and repayment restores it by re-swapping through the same pool. You already wrote the pool, the slot0 slot, the CREATE2 pool address, and the amounts-from-liquidity math; this contest is what happens when someone builds a lending market on top of all of it and trusts each piece a little too much. Four representative findings (2 H + 2 M).

Scope (1345 SLOC)

File	SLOC	Description
wagmi-leverage/contracts/LiquidityBorrowingManager.sol	661	Core leverage manager: borrow, repay, liquidate, and emergency-close positions built on borrowed V3 liquidity NFTs
wagmi-leverage/contracts/abstract/LiquidityManager.sol	344	Extracts and restores V3 liquidity: reads slot0() for pricing, loops creditors via ownerOf(), computes swap amounts and dynamic slippage bounds
wagmi-leverage/contracts/abstract/ApproveSwapAndPay.sol	161	Swap routing: external-router calls plus a Uniswap V3 fallback that derives the pool via CREATE2 and validates the swap callback
wagmi-leverage/contracts/abstract/DailyRateAndCollateral.sol	66	Daily-rate and collateral accounting shared by the borrowing manager
wagmi-leverage/contracts/vendor0.8/uniswap/LiquidityAmounts.sol	86	Uniswap amounts-from-liquidity helper: getAmountsForLiquidity across the current tick range
wagmi-leverage/contracts/Vault.sol	27	Fund custody: holds collateral and hold-token balances, transfers creditor rewards

Documentation

Source Code Protocol Docs

Part of the Uniswap V3 Path

This shadow audit connects to the Uniswap V3 Build module. Students who built the concentrated-liquidity pool have an advantage because they understand tick accounting, the swap loop, fee growth, the observation oracle, and callback-based payment.

View Build Module

Duration4 days

Total Findings4

Scope1345 SLOC

PriceFree