I read 3,280 lines of a live DeFi protocol and found a real bug with nowhere to send it

A line-by-line review of Alchemix v3 found a Medium-shaped access-control gap with a working exploit path — and a contest window that closed four months before I cloned the repo.