https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_3.png

0xG0P1

Security Researcher

Contact Me

High

16

Total

Medium

14

Total

$17.85K

Total Earnings

#395 All Time

25x

Payouts

gold

1x

1st Places

bronze

1x

3rd Places

regular

8x

Top 10

All

Sherlock

Code4rena

Cantina

CodeHawks

Immunefi

May '25

stability-contracts

stability-contracts

77.49 USDC • 1 total finding • Cantina • 0xG0P1

#26

high

Finding not yet public.

Apr '25

Kinetiq

Kinetiq

3,496.48 USDC • 4 total findings • Code4rena • 0xG0P1

gold

high

Buffer Silently Locks Staked HYPE in Contract Without Using Them For Withdrawals Or Providing A Way To Be Pulled Out Or Moved To L1

high

Users Who Queue Withdrawal Before A Slashing Event Disadvantage Users Who Queue After And Eventually Leads To Loss Of Funds For Them

high

Mishandling of receiving HYPE in the StakingManager , lead to user can't confirm withdrawal and inflate the exchange ratio

medium

Incorrect Balance Check in Validator Redelegation Process May Block Legitimate Rebalancing Operations

Jan '25

Liquid Ron

Liquid Ron

0.03 USDC • 1 total finding • Code4rena • 0xG0P1

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

Dec '24

Chainlink Payment Abstraction

Chainlink Payment Abstraction

1,987.07 USDC • Code4rena • 0xG0P1

bronze

Nov '24

hyperlend

hyperlend

43.12 USDC • 1 total finding • Cantina • 0xG0P1

#16

high

Finding not yet public.

Project

Project

695.35 USDC • 3 total findings • CodeHawks • 0xg0p1

#6

high

MembershipERC1155 proxy cannot be upgraded

medium

Reorg Vulnerability in DAO Membership Creation Allows Users to Join Incorrect DAOs

low

EIP712Base Is Incompatible With Chain Fork

Oct '24

stakeup-bloomv2

stakeup-bloomv2

42.54 USDC • 2 total findings • Cantina • 0xG0P1

#73

high

Finding not yet public.

medium

Finding not yet public.

Sep '24

symbioticfi-core

symbioticfi-core

211.51 USDC • 1 total finding • Cantina • 0xG0P1

#22

medium

Finding not yet public.

Aug '24

Fjord Token Staking

Fjord Token Staking

113.49 USDC • 2 total findings • CodeHawks • 0xg0p1

#13

medium

`FjordAuction` incorrect `block.timestamp` check allows users to bid after calling `auctionEnd` to claim more tokens than they should

medium

Owner of a cancelled Sablier stream will be elegible for a full amount reward claim, due to a revert in `FjordStaking::onStreamCanceled(...)`

Jul '24

Audit Comp | Folks Finance

Audit Comp | Folks Finance

213 USDC • 2 total findings • Immunefi • OxG0P1

#28

medium

Finding not yet public.

medium

Finding not yet public.

May '24

Sablier

Sablier

509.92 USDC • 2 total findings • CodeHawks • 0xg0p1

#12

medium

Use of CREATE method is suspicious of reorg attack

low

Stream sender is unable to cancel a stream with a pausable asset that is paused

Apr '24

Audit Comp | Alchemix

Audit Comp | Alchemix

1,925 USDC • 3 total findings • Immunefi • OxG0P1

#18

medium

Finding not yet public.

low

Finding not yet public.

low

Finding not yet public.

Feb '24

Audit Comp | eBTC

Audit Comp | eBTC

862 USDC • 1 total finding • Immunefi • OxG0P1

#8

low

Finding not yet public.

AI Arena

AI Arena

1.01 USDC • 1 total finding • Code4rena • 0xG0P1

#172

medium

NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)

Jan '24

MorpheusAI

MorpheusAI

1,903.49 USDC • 1 total finding • CodeHawks • 0xg0p1

#6

high

All claimed rewards will be lost for the users using the account abstraction wallet

LooksRare YOLO

LooksRare YOLO

17.38 USDC • 1 total finding • Sherlock • 0xG0P1

#7

high

The attacker can enter the game by depositing 0 ETH.

Dec '23

Revolution Protocol

Revolution Protocol

546.01 USDC • 2 total findings • Code4rena • 0xG0P1

#15

high

`ArtPiece.totalVotesSupply` and `ArtPiece.quorumVotes` are incorrectly calculated due to inclusion of the inaccessible voting powers of the NFT that is being auctioned at the moment when an art piece is created

medium

The quorumVotes can be bypassed

Nov '23

core-and-erc1155a

core-and-erc1155a

282.99 USDC • 1 total finding • Cantina • 0xG0P1

#21

high

Finding not yet public.

Oct '23

Ethena Labs

Ethena Labs

4.52 USDC • Code4rena • 0xG0P1

#40

Sep '23

Allo V2

Allo V2

421.87 USDC • 1 total finding • Sherlock • 0xG0P1

#18

high

The wrong address is being assigned as the `registry` in `Anchor.sol`

Aug '23

veRWA

veRWA

4.23 USDC • Code4rena • 0xG0P1

#53

Tangible Caviar

Tangible Caviar

5.8 USDC • Code4rena • 0xG0P1

#83

Jul '23

Tapioca DAO

Tapioca DAO

200.46 USDC • 3 total findings • Code4rena • 0xG0P1

#65

high

Ability to steal user funds and increase collateral share infinitely in BigBang and Singularity

medium

`totalCollateralShare` state variable not updated in `Singularity` market upon liquidation, resulting in an error on `addCollateral` with skim functionality

medium

SGLLeverage/BigBang `buyCollateral` Can Be Exploited to Steal Asset Approvals & Collateral

Nouns DAO

Nouns DAO

3,997.64 USDC • 1 total finding • Code4rena • 0xG0P1

#5

high

User can steal tokens by using duplicated ERC20 tokens as parameter in NounsDAOLogicV1Fork.quit

Jun '23

DODO V3

DODO V3

288.10 USDC • 1 total finding • Sherlock • 0xG0P1

#16

high

The `_poolRepayAll` function in D3VaultFunding.sol is failing to update the `info.balance` accurately, resulting in a substantial loss of funds for the protocol.