<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Pranamya&apos;s Disclosures</title><description>Vulnerability disclosures and security research by Pranamya Keshkamat.</description><link>https://pranamya.me/</link><language>en-us</language><item><title>[CRITICAL] Reentrancy in ExampleVault.withdraw() allows draining of share reserves</title><link>https://pranamya.me/disclosures/example-vault-reentrancy/</link><guid isPermaLink="true">https://pranamya.me/disclosures/example-vault-reentrancy/</guid><description>A missing state update before an external call lets an attacker re-enter withdraw() and redeem the same shares repeatedly, draining the vault&apos;s underlying reserves.</description><pubDate>Wed, 16 Sep 2026 00:00:00 GMT</pubDate><category>solidity</category><category>reentrancy</category><category>evm</category><category>defi</category><category>sample</category></item></channel></rss>