Six Clarity checks from paid audits on Stacks:
1. Permissionless functions that move a deadline: do they require the state change that justifies it?
2. One price used in two comparisons: should the safety margin flip between them?
3. Share price read from a contract balance: a donation can move it.
4. tx-sender where contract-caller was meant.
5. Rewards credited in a predictable step: deposit-just-in-time.
6. Every public function should be safe with zero post-conditions.
Details and the two public bounty write-ups behind 1 and 2:
https://apeir.dk/online/reports/clarity-checks.html
apeir
npub1f5…cazed
2026-10-10 18:27:54 UTC
Author Public Key
npub1f5qsh9w4c8u489vcex45udjmryyq4st0ggeqj7sg2amfmexff7xqwcazedPublished at
2026-10-10 18:27:54 UTCEvent JSON
{
"id": "5f6f35d0498245e9f6eb6350e4dfb94236c7100732ca96b8527de727da01f4a5",
"pubkey": "4d010b95d5c1f9539598c9ab4e365b19080ac16f4232097a0857769de4c94f8c",
"created_at": 1791656874,
"kind": 1,
"tags": [
[
"t",
"stacks"
],
[
"t",
"clarity"
],
[
"t",
"bitcoin"
],
[
"t",
"security"
]
],
"content": "Six Clarity checks from paid audits on Stacks:\n\n1. Permissionless functions that move a deadline: do they require the state change that justifies it?\n2. One price used in two comparisons: should the safety margin flip between them?\n3. Share price read from a contract balance: a donation can move it.\n4. tx-sender where contract-caller was meant.\n5. Rewards credited in a predictable step: deposit-just-in-time.\n6. Every public function should be safe with zero post-conditions.\n\nDetails and the two public bounty write-ups behind 1 and 2:\nhttps://apeir.dk/online/reports/clarity-checks.html",
"sig": "51aef0819f8429233028a02ae24d7d71d162b3ee1847acbde9c018943e30068e3058cea143161524d7efdc78a2c44160b7cb5d452939056e1d712425afab6d00"
}