Recon Logo

Audits

Pro

Case Studies

Team

Blog

POSTMORTEM

1 article tagged "postmortem"

2026-04-06·14 min read

Postmortem: The Lending Protocol Reentrancy That Fuzzing Missed — And Invariants Didn't

The dev team ran Echidna for 24 hours: zero findings. The same vulnerability was found by invariant testing in 90 seconds. Here's the exact reentrancy path, why mock ERC20s hide it, and the accounting properties that catch it.

By Antonio
reentrancyinvariant-testingdefi-security

Need help securing your protocol?

RECON

Cloud-powered invariant testing and security auditing for DeFi protocols. Trusted by leading teams.

Trusted by Liquity, Centrifuge, Badger, Corn & Balancer. 50+ critical findings. $3B+ TVL protected.

Product

Recon Pro

Request an Audit

AI Audits Demo

Dashboard

Docs

Services

Smart Contract Audit

DeFi Security Audit

Invariant Testing

Solidity Audit

Smart Contract Fuzzing

Tools

All Tools

Medusa Scraper

Echidna Scraper

Halmos Scraper

Test Builder

Resources

Case Studies

Reports

Blog

Learn

Comparisons

FAQ

Community

Team

Media

Bootcamp

Open Source

DailyWarden

OneBugPerDay

Company

Talk to Founder

Sales

Live Exploit Prevention

Dynamic Replacement

Ready to ship safer code?

Start with a free consultation or try Recon Pro today.

© 2026 Recon Fuzz. All rights reserved.

Privacy Policy

Terms of Service