https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/d7bd1080-296d-4608-9806-25fd60921dc5.jpg

0xpetern

Security Researcher

Victory is for those who take it.

Contact Me

High

Total

Medium

Solo

Total

$31.80K

Total Earnings

#310 All Time

39x

Payouts

1x

1st Places

1x

2nd Places

3x

3rd Places

All

Sherlock

Code4rena

Jan '26

Flying Tulip

101.65 USDC • Sherlock • 0xpetern

#94

Nov '25

SukukFi

0 USDC • 1 total finding • Code4rena • 0xpetern

#20

high

Finding not yet public.

Swafe

15.58 USDC • 2 total findings • Code4rena • 0xpetern

#48

medium

Finding not yet public.

medium

Finding not yet public.

stNXM by EaseDeFi

0.01 USDC • 1 total finding • Sherlock • 0xpetern

#52

high

Manipulating Uniswap V3 Spot Price Lets Attackers Mint Excess Shares or Redeem Extra Assets

Inverse Finance - Junior Tranche

12.54 USDC • 1 total finding • Sherlock • 0xpetern

medium

ERC-4626 maxDeposit/maxMint overstate acceptance limits, violating MUST-spec and causing reverts

Oct '25

Reflector V3

0.33 USDC • 3 total findings • Code4rena • 0xpetern

#14

high

`set_invocation_costs_config()` fails to authorize admin allowing anyone to set invocation costs

medium

`twap()` under-charges for multi-period queries due to hardcoded `periods=1`

medium

Systematic Overcharge in prices and x_prices: Fee Charged for Requested Records While Return is Capped at 20

Saffron Fixed Income Vaults

138.82 USDC • Sherlock • 0xpetern

#16

3Jane

246.81 USDC • Sherlock • 0xpetern

#14

Findings not publicly available for private contests.

Sep '25

Super DCA Liquidity Network

30.58 OP • 4 total findings • Sherlock • 0xpetern

#30

high

Bucket Accrual Reset Lets Anyone Nullify Rewards via stake/unstake

high

Old trades can claim rewards from before the program started

medium

First staker after idle unfairly earns past idle time

medium

Retroactive mint rate application backdates emissions to past time windows

Summer.fi - governance v2

9.82 USDC • 1 total finding • Sherlock • 0xpetern

medium

Precision-grief in rewards accrual lets attackers permanently truncate payouts especially for WBTC

Rezerve Money

18.18 USDC • Sherlock • 0xpetern

#76

Findings not publicly available for private contests.

BMX Deli Swap

198.80 USDC • 1 total finding • Sherlock • 0xpetern

#13

high

First-Time Incentive Activation Causes Over-Accrual of Rewards Due to Stale Pool Timestamp

Brevis Pico ZKVM

2,955.34 USDC • 3 total findings • Sherlock • 0xpetern

high

Missing boolean and one-hot constraints for instruction flags

high

Mersenne31 word range check is not checking the range

medium

wrong sign handling when x == 0 produces non-canonical / out-of-range x = p

Aug '25

USG - Tangent

5.60 USDC • 1 total finding • Sherlock • 0xpetern

#63

medium

USDT and Non-Standard ERC20 Token Transfers Cause Transaction Reverts in Zapping Proxy

Jul '25

Mellow Flexible Vaults

0.04 USDC • 1 total finding • Sherlock • 0xpetern

#43

medium

Incorrect `canTransfer` Check Logic Causes Revert on Whitelisted Sender

DeBank

277.89 USDC • Sherlock • 0xpetern

#15

Jun '25

Symbiotic Relay

16.16 USDC • 1 total finding • Sherlock • 0xpetern

#11

medium

Out-of-Gas (OOG) Errors Due to Unbounded Loop Over Operators

Chainlink Rewards

22,797.63 USDC • Code4rena • 0xpetern

DODO Cross-Chain DEX

6.10 USDC • 2 total findings • Sherlock • 0xpetern

#61

medium

ERC20.approve Used Instead of Safe Approvals causing failure for USDT and some tokens

medium

Static Slippage Parameter in `_swapAndSendERC20Tokens()` Causes Swap Reverts And Economic Losses

May '25

LEND

43.33 USDC • 2 total findings • Sherlock • 0xpetern

#47

medium

Unhandled Bad Debt in the Liquidation Flow

medium

USDT ERC20 transfer handling could break core functionality

Extrafi XLend

414.91 OP • Sherlock • 0xpetern

Findings not publicly available for private contests.

Apr '25

ZetaChain Cross-Chain

2,635.86 USDC • 2 total findings • Sherlock • 0xpetern

#10

medium

Insufficient Transaction Broadcast Timeout in EVM Chains

medium

Missing Nonce Reset During TSS Address Update Allowing Signature Replay

Mar '25

Forte: Float128 Solidity Library

45.17 USDC • 1 total finding • Code4rena • 0xpetern

#25

high

Sqrt function silently reverts the entire control flow when a packed float of 0 value is passed

PinLink: RWA-Tokenized DePIN Marketplace

6.48 USDC • Sherlock • 0xpetern

#56

Crestal Network

0.01 USDC • 1 total finding • Sherlock • 0xpetern

#12

high

Unauthorized Token Transfers Due to Public payWithERC20 Function

Feb '25

Usual Labs

79.91 USDC • Sherlock • 0xpetern

#33

Rova

0.04 USDC • 1 total finding • Sherlock • 0xpetern

medium

Incorrect calculation of user tokens when previous currency amount is greater than new currency amount

Jan '25

Peapods

173.50 USDC • 1 total finding • Sherlock • 0xpetern

#23

medium

Incorrect Handling of Intermediate Token Balance in Two-Hop Swaps

Aave v3.3

147.28 USDC • Sherlock • 0xpetern

#69

Dec '24

Mach Finance

615.38 USDC • 1 total finding • Sherlock • 0xpetern

medium

Missing Timestamp Validation for Pyth Oracle Price Feeds Leading to Stale Data Use

Tally ARB Staker

147.75 USDC • Sherlock • 0xpetern

#17

Flex Perpetuals

62.48 USDC • 1 total finding • Code4rena • 0xpetern

medium

Missing slippage protection in `AerodromeDexter.sol` `swapExactTokensForTokens()`

SecondSwap

87.18 USDC • 2 total findings • Code4rena • 0xpetern

#30

high

In `transferVesting`, the `grantorVesting.releaseRate` is calculated incorrectly, which leads to the sender being able to unlock more tokens than were initially locked.

high

Users can claim more that their actual allotment

Teller Lender Groups Update Audit

134.33 USDC • 1 total finding • Sherlock • 0xpetern

medium

ERC20.approve Used Instead of Safe Approvals, Causing Pool Failures with Some ERC20s

Oku's New Order Types Contract Contest

3.99 OP • 1 total finding • Sherlock • 0xpetern

#37

medium

Unused Allowance Causing Reverts in execute Function

Nov '24

Nouns DAO - Auction Streams

32.32 USDC • Sherlock • 0xpetern

#45

Telcoin Update #2

24.18 USDC • Sherlock • 0xpetern

#33

Oct '24

Gamma Brevis Rewarder

314.34 OP • 1 total finding • Sherlock • 0xpetern

medium

Integer Division Truncation Leading to Unexpected Reward Distribution

Aug '24

Chakra

1.75 USDT • 1 total finding • Code4rena • 0xpetern

#57

high

Anyone can manipulate user nonce (nonce_manager) in settlement contract