https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/d7bd1080-296d-4608-9806-25fd60921dc5.jpg

0xpetern

Security Researcher

Victory is for those who take it.

Contact Me

High

Total

Medium

Solo

Total

$28.07K

Total Earnings

#308 All Time

24x

Payouts

1x

1st Places

1x

2nd Places

2x

3rd Places

All

Sherlock

Code4rena

Jul '25

DeBank

277.89 USDC • Sherlock • 0xpetern

#15

Jun '25

Symbiotic Relay

17.43 USDC • 1 total finding • Sherlock • 0xpetern

#11

medium

Out-of-Gas (OOG) Errors Due to Unbounded Loop Over Operators

Chainlink Rewards

22,797.63 USDC • Code4rena • 0xpetern

DODO Cross-Chain DEX

6.10 USDC • 2 total findings • Sherlock • 0xpetern

#61

medium

ERC20.approve Used Instead of Safe Approvals causing failure for USDT and some tokens

medium

Static Slippage Parameter in `_swapAndSendERC20Tokens()` Causes Swap Reverts And Economic Losses

May '25

LEND

43.33 USDC • 2 total findings • Sherlock • 0xpetern

#47

medium

Unhandled Bad Debt in the Liquidation Flow

medium

USDT ERC20 transfer handling could break core functionality

Extrafi XLend

414.91 OP • Sherlock • 0xpetern

Findings not publicly available for private contests.

Apr '25

ZetaChain Cross-Chain

2,635.86 USDC • 2 total findings • Sherlock • 0xpetern

#10

medium

Insufficient Transaction Broadcast Timeout in EVM Chains

medium

Missing Nonce Reset During TSS Address Update Allowing Signature Replay

Mar '25

Forte: Float128 Solidity Library

45.17 USDC • 1 total finding • Code4rena • 0xpetern

#25

high

Sqrt function silently reverts the entire control flow when a packed float of 0 value is passed

PinLink: RWA-Tokenized DePIN Marketplace

6.48 USDC • Sherlock • 0xpetern

#56

Crestal Network

0.01 USDC • 1 total finding • Sherlock • 0xpetern

#12

high

Unauthorized Token Transfers Due to Public payWithERC20 Function

Feb '25

Usual Labs

79.91 USDC • Sherlock • 0xpetern

#33

Rova

0.04 USDC • 1 total finding • Sherlock • 0xpetern

medium

Incorrect calculation of user tokens when previous currency amount is greater than new currency amount

Jan '25

Peapods

173.50 USDC • 1 total finding • Sherlock • 0xpetern

#23

medium

Incorrect Handling of Intermediate Token Balance in Two-Hop Swaps

Aave v3.3

147.28 USDC • Sherlock • 0xpetern

#69

Dec '24

Mach Finance

615.38 USDC • 1 total finding • Sherlock • 0xpetern

medium

Missing Timestamp Validation for Pyth Oracle Price Feeds Leading to Stale Data Use

Tally ARB Staker

147.75 USDC • Sherlock • 0xpetern

#17

Flex Perpetuals

62.48 USDC • 1 total finding • Code4rena • 0xpetern

medium

Missing slippage protection in `AerodromeDexter.sol` `swapExactTokensForTokens()`

SecondSwap

87.18 USDC • 2 total findings • Code4rena • 0xpetern

#31

high

In `transferVesting`, the `grantorVesting.releaseRate` is calculated incorrectly, which leads to the sender being able to unlock more tokens than were initially locked.

high

Users can claim more that their actual allotment

Teller Lender Groups Update Audit

134.33 USDC • 1 total finding • Sherlock • 0xpetern

medium

ERC20.approve Used Instead of Safe Approvals, Causing Pool Failures with Some ERC20s

Oku's New Order Types Contract Contest

3.99 OP • 1 total finding • Sherlock • 0xpetern

#37

medium

Unused Allowance Causing Reverts in execute Function

Nov '24

Nouns DAO - Auction Streams

32.32 USDC • Sherlock • 0xpetern

#45

Telcoin Update #2

24.18 USDC • Sherlock • 0xpetern

#33

Oct '24

Gamma Brevis Rewarder

314.34 OP • 1 total finding • Sherlock • 0xpetern

medium

Integer Division Truncation Leading to Unexpected Reward Distribution

Aug '24

Chakra

1.75 USDT • 1 total finding • Code4rena • 0xpetern

#59

high

Anyone can manipulate user nonce (nonce_manager) in settlement contract