| Nested push return on a tuple LHS fails lowering | @rappie_eth | Retrying | — | Oct 5, 2026 |
| Compound assignment through a push-returned field fails lowering | @rappie_eth | Retrying | — | Oct 5, 2026 |
| encodeCall with a ternary function pointer fails lowering | @rappie_eth | Retrying | — | Oct 5, 2026 |
| Ternary push-return storage alias fails lowering | @rappie_eth | Retrying | — | Oct 5, 2026 |
| Field assignment through a nested push return fails lowering | @rappie_eth | Retrying | — | Oct 5, 2026 |
| Chained push on a push-returned storage array fails lowering | @rappie_eth | Retrying | — | Oct 5, 2026 |
| Local initializer from push-returned length fails loweringFixed in PR #121 | @rappie_eth | Credited | COVERAGE_GAP | Oct 5, 2026 |
| Tuple-assignment ternary short-circuit call fails loweringFixed in PR #120 | @rappie_eth | Credited | COVERAGE_GAP | Oct 5, 2026 |
| Tuple-assignment ternary condition fails with a right-side callFixed in PR #119 | @rappie_eth | Credited | COVERAGE_GAP | Oct 5, 2026 |
| Ternary-selected storage array pop revertsFixed in PR #118 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 5, 2026 |
| Mixed-width ternary addition in a loop post-expression spuriously panicsFixed in PR #116 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 4, 2026 |
| Nested internal call in tuple assignment fails loweringFixed in PR #115 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Negated signed division fails checked executionFixed in PR #114 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Member access on a push-returned dynamic storage reference fails loweringFixed in PR #113 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Qualified library custom error retains qualification on a local name collision | @rappie_eth | Disqualified | SOUNDNESS_GAP | Oct 4, 2026 |
| Regression: stored internal function value uses an abstract dispatch ID | @rappie_eth | Disqualified | SOUNDNESS_GAP | Oct 4, 2026 |
| Constructor self external-function value fails executionFixed in PR #112 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Side-effecting storage indexes in tuple assignment fail loweringFixed in PR #111 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Mixed ABI encoding of an external-function value fails loweringFixed in PR #110 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Unchecked int192 fixed-array compound assignment sign-extends storageFixed in PR #109 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 4, 2026 |
| ABI-decoded uint56 complement in a local spuriously reverts | @rappie_eth | Duplicate | SOUNDNESS_GAP | Oct 4, 2026 |
| ABI-decoded checked int8 addition reports empty revert instead of Panic(0x11)Fixed in PR #108 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 4, 2026 |
| Redundant UDVT conversion around an ABI-decoded value fails loweringFixed in PR #107 | @rappie_eth | Credited | COVERAGE_GAP | Oct 4, 2026 |
| Checked uint256 subtraction under complement misses Panic(0x11)Fixed in PR #106 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 4, 2026 |
| Later fixed-array storage access after a dynamic-array copy panicsFixed in PR #105 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 2, 2026 |
| Nested dynamic-array storage reference return panicsFixed in PR #105 | @rappie_eth | Credited | SOUNDNESS_GAP | Oct 2, 2026 |
| apex inj probe | @apexblacktest | Rejected | — | Sep 26, 2026 |
| apex inj probe | @apexblacktest | Rejected | NO_DIVERGENCE | Sep 26, 2026 |
| apex import probe | @apexblacktest | Rejected | — | Sep 26, 2026 |
| XSSTEST </script><img src=x onerror=alert(1)> " ' & | @testingrhino | Rejected | — | Sep 26, 2026 |
| probe nonexistent.sol | @admin | Rejected | — | Sep 26, 2026 |
| probe ../../../../etc/hostname | @admin | Rejected | — | Sep 26, 2026 |
| probe ../etc/hostname | @admin | Rejected | — | Sep 26, 2026 |
| probe /etc/hostname | @admin | Rejected | — | Sep 26, 2026 |
| codex import probe | @admin | Rejected | — | Sep 26, 2026 |
| a && (b || c) evaluates to false when it is true | @TheBenMeadows | Duplicate | — | Sep 19, 2026 |
| abi.encode of ~x on a bytesN value reverts | @TheBenMeadows | Duplicate | — | Sep 18, 2026 |
| push through bytes(s) on a storage string reverts | @TheBenMeadows | Duplicate | — | Sep 18, 2026 |
| struct constructor copies a memory array instead of referencing it | @TheBenMeadows | Duplicate | — | Sep 18, 2026 |
| a && (b || c) evaluates to false when it is true | @TheBenMeadows | Duplicate | — | Sep 18, 2026 |
| fixed mapping struct bytes copyFixed in PR #104 | @cameronspirals | Credited | SOUNDNESS_GAP | Aug 24, 2026 |
| my glaaaasses | @cameronspirals | Duplicate | — | Aug 21, 2026 |
| solful | @cameronspirals | Duplicate | — | Aug 12, 2026 |
| Submission 3fb28d64 | @0xalpharush | Duplicate | — | Aug 10, 2026 |
| Submission 4b86ad71Fixed in PR #104 | @0xalpharush | Credited | SOUNDNESS_GAP | Aug 10, 2026 |
| Submission 535d211c | @0xalpharush | Duplicate | — | Aug 10, 2026 |
| Submission b8cef96fFixed in PR #104 | @0xalpharush | Credited | SOUNDNESS_GAP | Aug 10, 2026 |
| Submission 09e763e8 | @0xalpharush | Duplicate | — | Aug 10, 2026 |
| Submission 02c143c6 | @0xalpharush | Duplicate | — | Aug 10, 2026 |
| Submission ea322e4cFixed in PR #104 | @0xalpharush | Credited | SOUNDNESS_GAP | Aug 10, 2026 |