Security Researcher
High
Total
Medium
Total Earnings
#427 All Time
Payouts
Top 25
Top 50
All
Sherlock
Code4rena
Cantina
Sep '25
237.92 OP • 3 total findings • Sherlock • 0xBoraichoT
#13
high
Block-Level Front-Running in Community Reward Allocation
Lack of Native ETH Support Prevents Contract Owner from Collecting Fees
medium
First Depositor can flash loan the protocol too artificially increase the token rewards without incurring any risk
Jul '25
613.34 USDC • 2 total findings • Sherlock • 0xBoraichoT
#12
Double Withdrawal Attack via Reentrant Calls During Yield Token Redemption
Users Can DOS Market Creation By Creating Markets Directly on Morpho.
Jan '25
1,116.21 USDC • 2 total findings • Cantina • Boraicho
#29
Dec '24
13,977.95 USDC • 1 total finding • Cantina • Boraicho
#20
Nov '24
26.15 USDC • Code4rena • boraichodrunkenmaster
#82
43.12 USDC • 1 total finding • Cantina • Boraicho
#16
Sep '24
2,092.99 USDC • 1 total finding • Cantina • Boraicho
Jul '24
0 USDC • 1 total finding • Code4rena • boraichodrunkenmaster
#89
Pause and unpause functions are inaccessible
19.88 USDC • 3 total findings • Code4rena • boraichodrunkenmaster
#48
Incorrect calculation of `newCumulativeIndex` in function `calcDecrease`
WhenNotPaused modifier in the CDPVault can be bypassed by users
Malicious actor can abuse the minimum shares check in `StakingLPEth` and cause DoS or locked funds for the last user that withdraws