https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_2.png

0xblackadam

Security Researcher

Contact Me

High

5

Total

Medium

10

Total

$5.28K

Total Earnings

#836 All Time

10x

Payouts

regular

3x

Top 10

regular

5x

Top 25

regular

7x

Top 50

All

Code4rena

Cantina

CodeHawks

Immunefi

Jun '25

telcoin-network

telcoin-network

0.95 USDC • 1 total finding • Cantina • 0xblackadam

#70

high

Finding not yet public.

May '25

aave-aptos

aave-aptos

175.25 GHO • 1 total finding • Cantina • 0xblackadam

#10

medium

Finding not yet public.

SXT

SXT

547.53 USDC • 2 total findings • Cantina • 0xblackadam

#14

medium

Finding not yet public.

medium

Finding not yet public.

alchemix-v3

alchemix-v3

146.07 USDC • 2 total findings • Cantina • 0xblackadam

#44

high

Finding not yet public.

medium

Finding not yet public.

Apr '25

Audit Comp | Spectra Finance

Audit Comp | Spectra Finance

38 USDC • 1 total finding • Immunefi • Oxblackadam

#22

medium

Finding not yet public.

Staking Part 2

Staking Part 2

4,132.83 usdc • CodeHawks • 0xblackadam

#6

Mar '25

Audit Comp | Yeet

Audit Comp | Yeet

22 USDC • 1 total finding • Immunefi • Oxblackadam

#69

low

Finding not yet public.

Feb '25

Virtuals Protocol

Virtuals Protocol

203.81 USDC • 2 total findings • Code4rena • BlackAdam

#37

high

Anybody can control a user's delegate by calling `AgentVeToken.stake()` with 1 wei

medium

Missing Slippage Protection On Buy And Sell

Core Contracts

Core Contracts

12.36 usdc • 8 total findings • CodeHawks • 0xblackadam

#268

high

RAACNFT mint function receives funds to address(this) but has no way of withdrawing them

medium

Incorrect accounting in `veRAACToken::emergencyWithdraw` and `veRAACToken::withdraw` due to missing `totalLocked` update

medium

veRaac Token Constraint MAX_TOTAL_SUPPLY Can Be Bypassed. Vulnerability Disrupts Protocol Functionality and Undermines Governance Quorum.

medium

There is no logic checking for RAACNFT price staleness before minting it

medium

Multiple Token Management Lets Withdraw a Token Different than Deposited Token

low

Lack of enforcement of the `MAX_TOTAL_LOCKED_AMOUNT`

low

`FeeCollector::updateFeeType` wrong fee share validation leads to impossible update for some fee types

low

Overwriting Previous Allocations in allocateFunds May Lead to Loss of Cumulative Allocation Data

Jan '25

Liquid Ron

Liquid Ron

0.03 USDC • 1 total finding • Code4rena • BlackAdam

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors