0xGoodess

Security Researcher

Contact Me

High

Total

Medium

Solo

Total

$22.84K

Total Earnings

#340 All Time

13x

Payouts

1x

3rd Places

6x

Top 10

8x

Top 25

All

Sherlock

Oct '23

LooksRare

166.38 USDC • 1 total finding • Sherlock • 0xGoodess

medium

_woundRequestFulfilled is not a uniform distribution on a population with wounded samples

Jul '23

Tokemak

400.84 USDC • 2 total findings • Sherlock • 0xGoodess

#33

high

new staker/LMPvault get free earned token on AbstractRewarders

medium

the stake flow on gpToke being mandatory on rewarder potentially brick staker's withdrawal from DestinationVault

Jun '23

Symmetrical

70.23 USDC • 1 total finding • Sherlock • 0xGoodess

#35

medium

liquidator can only call liquidatePartyA twice, or liquidatorPartyA + setSymbolPrice without completing the 4-step since only first 2 callers get all liquidation fee

Unitas Protocol

168.98 USDC • 2 total findings • Sherlock • 0xGoodess

#16

medium

user has no way to express minimum output acceptance during swap in Unitas

medium

There is no liveness check on the getLatestPrice from oracle when used on Unitas

May '23

Perennial

6,607.68 USDC • 2 total findings • Sherlock • 0xGoodess

high

an account's deposit on BalancedVault can be DOS to delay permanently

medium

liquidate may fail due to debiting liquidation fee from 0

Index

9,274.31 USDC • 3 total findings • Sherlock • 0xGoodess

high

_calculateMaxBorrowCollateral does not check whether the strategy is in Emode or not leading to inaccurate representation of LTV.

medium

no checks on chainlink stale price on _createActionInfo

medium

setExecutionSettings would be halt during a rebalance operation that gets stuck due to supply cap is reached at Aave

Footium

72.79 USDC • 2 total findings • Sherlock • 0xGoodess

#27

medium

FootiumEscrow uses transfer which may fail for non standard ERC20

medium

FootiumEscrow uses approve which may fail for non standard ERC20

Apr '23

GMX Update

4,128.30 USDC • 1 total finding • Sherlock • 0xGoodess

medium

short side of getReservedUsd does not work for market that has the same collateral token

Teller

24.02 USDC • 2 total findings • Sherlock • 0xGoodess

#46

medium

Protocol Fee does not have a cap

medium

lender could be forced to withdraw collateral even if he/she would rather wait for liquidation during default

Mar '23

Gitcoin

71.48 USDC • Sherlock • 0xGoodess

#44

Notional V3

547.59 USDC • 1 total finding • Sherlock • 0xGoodess

medium

rebalance would fail if any external market of the same underlying fails to redeem.

Telcoin Update

128.97 USDC • 1 total finding • Sherlock • 0xGoodess

medium

use of safeApprove in submit on FeeBuyback is inconsistent among token and _telcoin

Feb '23

GMX

1,174.14 USDC • 1 total finding • Sherlock • 0xGoodess

#18

medium

_validateRange in Config does not check the input value as described