https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/ee7cae51-a807-4137-9a63-fe57aaa3c92c.jpeg

0xGondar

Security Researcher

Contact Me

High

Total

Medium

Total

$256.00

Total Earnings

#1603 All Time

10x

Payouts

1x

Top 10

4x

Top 25

5x

Top 50

All

Sherlock

Code4rena

Cantina

CodeHawks

Mar '25

Crestal Network

0.01 USDC • 1 total finding • Sherlock • 0xGondar

#12

high

Unprotected payWithERC20 Function allows complete theft of tokens

Feb '25

THORWallet

0.35 USDC • 1 total finding • Code4rena • 0xGondar

high

MergeTgt has no handling if TGT_TO_EXCHANGE is exceeded during the exchange period

Jan '25

Next Generation

3.65 USDC • 1 total finding • Code4rena • 0xGondar

#14

high

Cross-Chain Signature Replay Attack Due to User-Supplied `domainSeparator` and Missing Deadline Check

daao-contracts

5.08 USDC • 2 total findings • Cantina • 0xGondar

#86

high

Finding not yet public.

high

Finding not yet public.

Plaza Finance

0.23 USDC • 1 total finding • Sherlock • 0xGondar

#99

medium

Auction bidding will be bricked for everyone by blacklisted user

Dec '24

Alchemix Transmuter

11.67 op • 1 total finding • CodeHawks • 0xgondar

#27

medium

not adding `claimable` balance to the total assets in `_harvestAndReport` can cause losses.

SecondSwap

4.28 USDC • 1 total finding • Code4rena • 0xGondar

#54

medium

Creator of one vesting plan can affect vesting plans created by other users.

Autonomint Colored Dollar V1

0.18 OP • 1 total finding • Sherlock • 0xGondar

#66

high

Arbitrary Usda/Usdt Price Manipulation Allows Usdt Drain

Lambo.win

230.47 USDC • 3 total findings • Code4rena • 0xGondar

#15

high

Minting zero tokens when underlyingToken is not Ether in cashIn()

medium

Since the cost of launching a new pool is minimal, an attacker can maliciously consume VirtualTokens.

medium

Users can prevent protocol from rebalancing for his gain and cause loss of funds for protocol and its users

Oct '24

Dria

0.32 USDC • 1 total finding • CodeHawks • 0xgondar

#72

high

Subtraction in `variance()` will revert due to underflow