https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/e4951a55-c8e2-4c15-b4d9-dbe3d4895b60.png

0x175

Security Researcher

Smart Contract Security Researcher

Contact Me

High

Total

Medium

Total

$147.00

Total Earnings

#2044 All Time

7x

Payouts

1x

Top 25

3x

Top 50

All

Code4rena

Cantina

May '24

Munchables

0.01 USDC • 1 total finding • Code4rena • 0x175

#16

high

Malicious User can call `lockOnBehalf` repeatedly extend a users `unlockTime`, removing their ability to withdraw previously locked tokens

Apr '24

DYAD

18.49 USDC • 4 total findings • Code4rena • 0x175

#83

high

Attacker can make 0 value deposit() calls to deny user from redeeming or withdrawing collateral

high

Kerosene collateral is not being moved on liquidation, exposing liquidators to loss

high

Unable to withdraw Kerosene from `vaultmanagerv2::withdraw` as it expects a `vault.oracle()` method which is missing in Kerosene vaults

medium

Attacker can frontrun to prevent vaults from being removed from the dNFT owner's position

Mar '24

Revert Lend

44.19 USDC • 3 total findings • Code4rena • 0x175

#57

high

Owner of a position can prevent liquidation due to the 'onERC721Received' callback

medium

V3Oracle susceptible to price manipulation

medium

Repayments and liquidations can be forced to revert by an attacker that repays miniscule amount of shares

Jan '24

incentive-contracts

80.33 USDC • 2 total findings • Cantina • 0x175

#31

medium

Finding not yet public.

medium

Finding not yet public.

Dec '23

Revolution Protocol

2.67 USDC • 1 total finding • Code4rena • 0x175

#73

medium

Bidder can use donations to get VerbsToken from auction that already ended.

Nov '23

Canto Application Specific Dollars and Bonding Curves for 1155s

1.37 USDC • 1 total finding • Code4rena • 0x175

#30

medium

No slippage protection for Market functions

Oct '23

NextGen

0.15 USDC • 1 total finding • Code4rena • 0x175

#108

high

Attacker can reenter to mint all the collection supply