https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/99a4ad6f-9b08-4683-b036-c6be4cfad958.jpg

0xMilenov

Security Researcher

Rookie Security Researcher. Here to share my mistakes with you, so you can avoid making them.

Contact Me

Medium

Total

$956.00

Total Earnings

#1452 All Time

7x

Payouts

3x

Top 25

6x

Top 50

All

Code4rena

Nov '25

Megapot

2.48 USDC • 1 total finding • Code4rena • 0xMilenov

#23

medium

Changing Payout Calculator During Active Drawing Causes Loss of Unclaimed Winnings

Aug '25

GTE Perps and Launchpad

555.95 USDC • 4 total findings • Code4rena • 0xMilenov

#37

medium

Bypass of recipient check allows pre-seeding the real pair and manipulating initial AMM price

medium

Unsynchronized LaunchpadLPVault address leading to Loss of fee to Stakers of new lunchPad token

medium

`LaunchToken` transfers cause staking rewards to be lost to the `LaunchPad`

medium

Pair pre-creation disables Launchpad rewards hooks leading to no fees accrued or distributed

May '24

Predy

4.02 USDC • 2 total findings • Code4rena • 0xMilenov

#35

medium

Vaults can become immune from liquidation by setting `vault.recipient` to a blacklisted quote token address

medium

Chainlink's `latestRoundData` might return stale or incorrect results

Dec '23

Olas

21.9 USDC • Code4rena • 0xMilenov

#20

Nov '23

Kelp DAO | rsETH

140.25 USDC • 1 total finding • Code4rena • 0xMilenov

#29

medium

Lack of slippage control on LRTDepositPool.depositAsset

Jul '23

Nouns DAO

58.98 USDC • Code4rena • 0xMilenov

#16

May '23

Maia DAO Ecosystem

172.82 USDC • 1 total finding • Code4rena • 0xMilenov

#55

medium

Ulysses omnichain - addbridgeagentfactory in rootPort is not functional