https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_7.png

0xGoodess

Security Researcher

Contact Me

High

3

Total

Medium

2

Solo

16

Total

$22.84K

Total Earnings

#340 All Time

13x

Payouts

bronze

1x

3rd Places

regular

6x

Top 10

regular

8x

Top 25

All

Sherlock

Oct '23

LooksRare

LooksRare

166.38 USDC • 1 total finding • Sherlock • 0xGoodess

#8

medium

_woundRequestFulfilled is not a uniform distribution on a population with wounded samples

Jul '23

Tokemak

Tokemak

400.84 USDC • 2 total findings • Sherlock • 0xGoodess

#33

high

new staker/LMPvault get free earned token on AbstractRewarders

medium

the stake flow on gpToke being mandatory on rewarder potentially brick staker's withdrawal from DestinationVault

Jun '23

Symmetrical

Symmetrical

70.23 USDC • 1 total finding • Sherlock • 0xGoodess

#35

medium

liquidator can only call liquidatePartyA twice, or liquidatorPartyA + setSymbolPrice without completing the 4-step since only first 2 callers get all liquidation fee

Unitas Protocol

Unitas Protocol

168.98 USDC • 2 total findings • Sherlock • 0xGoodess

#16

medium

user has no way to express minimum output acceptance during swap in Unitas

medium

There is no liveness check on the getLatestPrice from oracle when used on Unitas

May '23

Perennial

Perennial

6,607.68 USDC • 2 total findings • Sherlock • 0xGoodess

#4

high

an account's deposit on BalancedVault can be DOS to delay permanently

medium

liquidate may fail due to debiting liquidation fee from 0

Index

Index

9,274.31 USDC • 3 total findings • Sherlock • 0xGoodess

bronze

high

_calculateMaxBorrowCollateral does not check whether the strategy is in Emode or not leading to inaccurate representation of LTV.

medium

no checks on chainlink stale price on _createActionInfo

medium

setExecutionSettings would be halt during a rebalance operation that gets stuck due to supply cap is reached at Aave

Footium

Footium

72.79 USDC • 2 total findings • Sherlock • 0xGoodess

#27

medium

FootiumEscrow uses transfer which may fail for non standard ERC20

medium

FootiumEscrow uses approve which may fail for non standard ERC20

Apr '23

GMX Update

GMX Update

4,128.30 USDC • 1 total finding • Sherlock • 0xGoodess

#8

medium

short side of getReservedUsd does not work for market that has the same collateral token

Teller

Teller

24.02 USDC • 2 total findings • Sherlock • 0xGoodess

#46

medium

Protocol Fee does not have a cap

medium

lender could be forced to withdraw collateral even if he/she would rather wait for liquidation during default

Mar '23

Gitcoin

Gitcoin

71.48 USDC • Sherlock • 0xGoodess

#44

Notional V3

Notional V3

547.59 USDC • 1 total finding • Sherlock • 0xGoodess

#9

medium

rebalance would fail if any external market of the same underlying fails to redeem.

Telcoin Update

Telcoin Update

128.97 USDC • 1 total finding • Sherlock • 0xGoodess

#5

medium

use of safeApprove in submit on FeeBuyback is inconsistent among token and _telcoin

Feb '23

GMX

GMX

1,174.14 USDC • 1 total finding • Sherlock • 0xGoodess

#18

medium

_validateRange in Config does not check the input value as described