https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/ac1a33b4-c38d-48dd-89e6-ee2d60966679.jpeg

0xodus

Security Researcher

Computer Science student

Contact Me

High

Total

Medium

Total

$1.12K

Total Earnings

#1408 All Time

10x

Payouts

1x

Top 10

4x

Top 25

9x

Top 50

All

Sherlock

Code4rena

Cantina

CodeHawks

Immunefi

Dec '25

Monolith Stablecoin Factory

1.62 USDC • 1 total finding • Sherlock • 0xodus

#26

medium

Unit mismatch in `calculateInterest` function causes massive interest undercharge

Nov '25

Audit Comp | Vechain | Stargate Hayabusa

139 USDT • 4 total findings • Immunefi • Oxodus

#17

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

low

Finding not yet public.

Sep '25

Summer.fi - governance v2

9.82 USDC • 1 total finding • Sherlock • 0xodus

medium

Precision loss in reward calculation will cause partial or complete loss of rewards for stakers as an attacker can grief reward distribution

Aug '25

USG - Tangent

55.09 USDC • 2 total findings • Sherlock • 0xodus

#52

high

Missing control tower verification in migration functions allows unauthorized position manipulation

medium

Liqudation fee calculation makes some Liquidations unprofitable

Jul '25

Notional Exponent

11.98 USDC • 1 total finding • Sherlock • 0xodus

#49

medium

Anyone can cause Denial of Service for protocol market initialization by creating markets with predictable parameters

May '25

superform-core

802.6 USDC • 1 total finding • Cantina • 0xodus

#14

medium

Finding not yet public.

Mar '25

Audit Comp | Yeet

38 USDC • 1 total finding • Immunefi • Oxodus

#50

high

Finding not yet public.

badger-ebtc-bsm

14.85 USDC • 1 total finding • Cantina • 0xodus

#31

high

Finding not yet public.

Feb '25

Liquidity Management

43.87 usdc • 1 total finding • CodeHawks • 0xodus

#45

high

Loss of fee refund due to premature state deletion in `PerpetualVault::_handleReturn` function

Jan '25

Liquid Ron

0 USDC • 1 total finding • Code4rena • 0xodus

#12

medium

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions