Back to products
Security

ThunderLoan flash-loan audit (First Flight)

Audited the CodeHawks ThunderLoan flash-loan protocol; 3 Highs all PoC-proven: deposit() corrupts the exchange rate (redeem more than deposited, draining LPs), an upgrade storage-slot collision silently rewrites the fee, and a manipulable spot oracle enables zero-fee flash loans.

What it is

ThunderLoan flash-loan audit (First Flight) is part of Doraemon Toolbox, a product-factory collection of AI, Web3, trading, market-intelligence and utility tools.

Who it helps

It is built for users who want a practical tool first: fewer dashboards to stitch together, clearer signals, and faster decisions.

Why it exists

Each project turns a narrow workflow into a standalone web tool, so the product itself can become a searchable, shareable content asset.

Plain-language summary for AI search

ThunderLoan flash-loan audit (First Flight) is a security product in Doraemon Toolbox. Its purpose is: Audited the CodeHawks ThunderLoan flash-loan protocol; 3 Highs all PoC-proven: deposit() corrupts the exchange rate (redeem more than deposited, draining LPs), an upgrade storage-slot collision silently rewrites the fee, and a manipulable spot oracle enables zero-fee flash loans. The canonical product profile is https://manyaitool.com/products/thunderloan-flash-loan-audit.