Security Researcher
High
Total
Medium
Total Earnings
#350 All Time
Payouts
1st Places
Top 10
Top 25
All
Code4rena
May '22
94.79 USDC • 1 total finding • Code4rena • 0xliumin
#23
high
The check for value transfer success is made after the return statement in _withdrawFromYieldPool of LidoVault
95.39 USDC • 1 total finding • Code4rena • 0xliumin
#34
medium
Use of `.send()` May Revert if The Recipient's Fallback Function Consumes More Than 2300 Gas
Feb '22
688.37 UST • Code4rena • 0xliumin
#14
4,653.83 USDC • 1 total finding • Code4rena • 0xliumin
#5
NFT owner can create multiple auctions
6,078.68 USDC • 3 total findings • Code4rena • 0xliumin
Assets sent from MarginAccount to InsuranceFund will be locked forever
After debt seizure from InsuranceFund, user can dilute all past participants.
All AMMs have to be past nextFundingTime to update
2,964.2 USDC • 1 total finding • Code4rena • 0xliumin
#8
ERC4626 mint uses wrong `amount`
63.66 USDC • Code4rena • 0xliumin
#31
7,232.49 USDC • 2 total findings • Code4rena • 0xliumin
Wrong logic around `areOperatorsImported`
Destroy can avoid the bulk of fees
747.92 USDC • 2 total findings • Code4rena • 0xliumin
#19
Shelter `claimed` mapping is set with `_to` address and not `msg.sender`
Repeated Calls to Shelter.withdraw Can Drain All Funds in Shelter
