0xBoraichoT

Security Researcher

Contact Me

High

Total

Medium

Total

$18.16K

Total Earnings

#456 All Time

12x

Payouts

1x

3rd Places

1x

Top 10

6x

Top 25

All

Sherlock

Code4rena

Cantina

Jan '26

Hotstuff

15.13 USDC • Sherlock • 0xBoraichoT

#54

Findings not publicly available for private contests.

Nov '25

Inverse Finance - Junior Tranche

12.54 USDC • 1 total finding • Sherlock • 0xBoraichoT

medium

Unoverridden maxDeposit Function Causes ERC-4626 Non-Compliance; maxMint Also Affected by Similar Conceptual Issue

Sep '25

Super DCA Liquidity Network

237.92 OP • 3 total findings • Sherlock • 0xBoraichoT

#13

high

Block-Level Front-Running in Community Reward Allocation

high

Lack of Native ETH Support Prevents Contract Owner from Collecting Fees

medium

First Depositor can flash loan the protocol too artificially increase the token rewards without incurring any risk

Rezerve Money

0.43 USDC • Sherlock • 0xBoraichoT

#97

Findings not publicly available for private contests.

Jul '25

Notional Exponent

613.34 USDC • 2 total findings • Sherlock • 0xBoraichoT

#12

high

Double Withdrawal Attack via Reentrant Calls During Yield Token Redemption

medium

Users Can DOS Market Creation By Creating Markets Directly on Morpho.

Jan '25

infrared-contracts

1,116.21 USDC • 2 total findings • Cantina • Boraicho

#29

high

Finding not yet public.

high

Finding not yet public.

Dec '24

story-protocol

13,977.95 USDC • 1 total finding • Cantina • Boraicho

#20

high

Finding not yet public.

Nov '24

Concrete

26.15 USDC • Code4rena • boraichodrunkenmaster

#82

hyperlend

43.12 USDC • 1 total finding • Cantina • Boraicho

#16

high

Finding not yet public.

Sep '24

infinitypools

2,092.99 USDC • 1 total finding • Cantina • Boraicho

#12

high

Finding not yet public.

Jul '24

TraitForge

0 USDC • 1 total finding • Code4rena • boraichodrunkenmaster

#89

medium

Pause and unpause functions are inaccessible

LoopFi

19.88 USDC • 3 total findings • Code4rena • boraichodrunkenmaster

#48

medium

Incorrect calculation of `newCumulativeIndex` in function `calcDecrease`

medium

WhenNotPaused modifier in the CDPVault can be bypassed by users

medium

Malicious actor can abuse the minimum shares check in `StakingLPEth` and cause DoS or locked funds for the last user that withdraws