0xG0P1

Security Researcher

Contact Me

High

Total

Medium

Total

$14.48K

Total Earnings

#438 All Time

24x

Payouts

1x

3rd Places

7x

Top 10

17x

Top 25

All

Sherlock

Code4rena

Cantina

CodeHawks

Immunefi

Mar '25

badger-ebtc-bsm

203.82 USDC • 2 total findings • Cantina • 0xG0P1

#17

high

Finding not yet public.

medium

Finding not yet public.

Jan '25

Liquid Ron

0.03 USDC • 1 total finding • Code4rena • 0xG0P1

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

Dec '24

Chainlink Payment Abstraction

1,987.07 USDC • Code4rena • 0xG0P1

Nov '24

hyperlend

43.12 USDC • 1 total finding • Cantina • 0xG0P1

#16

high

Finding not yet public.

Project

695.35 USDC • 3 total findings • CodeHawks • 0xg0p1

high

MembershipERC1155 proxy cannot be upgraded

medium

Reorg Vulnerability in DAO Membership Creation Allows Users to Join Incorrect DAOs

low

EIP712Base Is Incompatible With Chain Fork

Oct '24

stakeup-bloomv2

42.54 USDC • 2 total findings • Cantina • 0xG0P1

#80

high

Finding not yet public.

medium

Finding not yet public.

Sep '24

symbioticfi-core

211.51 USDC • 1 total finding • Cantina • 0xG0P1

#24

medium

Finding not yet public.

Aug '24

Fjord Token Staking

113.49 USDC • 2 total findings • CodeHawks • 0xg0p1

#13

medium

`FjordAuction` incorrect `block.timestamp` check allows users to bid after calling `auctionEnd` to claim more tokens than they should

medium

Owner of a cancelled Sablier stream will be elegible for a full amount reward claim, due to a revert in `FjordStaking::onStreamCanceled(...)`

Jul '24

Audit Comp | Folks Finance

213 USDC • 2 total findings • Immunefi • OxG0P1

#28

medium

Finding not yet public.

medium

Finding not yet public.

May '24

Sablier

509.92 USDC • 2 total findings • CodeHawks • 0xg0p1

#12

medium

Use of CREATE method is suspicious of reorg attack

low

Stream sender is unable to cancel a stream with a pausable asset that is paused

Apr '24

Audit Comp | Alchemix

1,925 USDC • 3 total findings • Immunefi • OxG0P1

#18

medium

Finding not yet public.

low

Finding not yet public.

low

Finding not yet public.

Feb '24

Audit Comp | eBTC

862 USDC • 1 total finding • Immunefi • OxG0P1

low

Finding not yet public.

AI Arena

1.01 USDC • 1 total finding • Code4rena • 0xG0P1

#172

medium

NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)

Jan '24

MorpheusAI

1,903.49 USDC • 1 total finding • CodeHawks • 0xg0p1

high

All claimed rewards will be lost for the users using the account abstraction wallet

LooksRare YOLO

17.38 USDC • 1 total finding • Sherlock • 0xG0P1

high

The attacker can enter the game by depositing 0 ETH.

Dec '23

Revolution Protocol

546.01 USDC • 2 total findings • Code4rena • 0xG0P1

#15

high

`ArtPiece.totalVotesSupply` and `ArtPiece.quorumVotes` are incorrectly calculated due to inclusion of the inaccessible voting powers of the NFT that is being auctioned at the moment when an art piece is created

medium

The quorumVotes can be bypassed

Nov '23

core-and-erc1155a

282.99 USDC • 1 total finding • Cantina • 0xG0P1

#21

high

Finding not yet public.

Oct '23

Ethena Labs

4.52 USDC • Code4rena • 0xG0P1

#40

Sep '23

Allo V2

421.87 USDC • 1 total finding • Sherlock • 0xG0P1

#18

high

The wrong address is being assigned as the `registry` in `Anchor.sol`

Aug '23

veRWA

4.23 USDC • Code4rena • 0xG0P1

#53

Tangible Caviar

5.8 USDC • Code4rena • 0xG0P1

#83

Jul '23

Tapioca DAO

200.46 USDC • 3 total findings • Code4rena • 0xG0P1

#65

high

Ability to steal user funds and increase collateral share infinitely in BigBang and Singularity

medium

`totalCollateralShare` state variable not updated in `Singularity` market upon liquidation, resulting in an error on `addCollateral` with skim functionality

medium

SGLLeverage/BigBang `buyCollateral` Can Be Exploited to Steal Asset Approvals & Collateral

Nouns DAO

3,997.64 USDC • 1 total finding • Code4rena • 0xG0P1

high

User can steal tokens by using duplicated ERC20 tokens as parameter in NounsDAOLogicV1Fork.quit

Jun '23

DODO V3

288.10 USDC • 1 total finding • Sherlock • 0xG0P1

#16

high

The `_poolRepayAll` function in D3VaultFunding.sol is failing to update the `info.balance` accurately, resulting in a substantial loss of funds for the protocol.