Meridian Finance Audit

Meridian Finance was preparing to launch a lending protocol on BNB Chain. Two weeks before launch, they hired us for a final security audit. We found a critical reentrancy vulnerability that would have allowed complete drainage of the lending pool.

Challenge

The vulnerability was non-obvious — it exploited a read-only reentrancy pattern in an integrated external price oracle, not in the lending contract itself. Automated tools missed it. Manual review caught it on day 3.