https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/630f8d3f-b3f0-41bd-8ea4-46c7b7c3b00b.png

10ap17

Security Researcher

7e8f7f6f86

Contact Me

High

Total

Medium

Total

$2.58K

Total Earnings

#1001 All Time

6x

Payouts

1x

1st Places

2x

Top 10

3x

Top 25

All

Sherlock

CodeHawks

Jun '25

DODO Cross-Chain DEX

677.19 USDC • 6 total findings • Sherlock • 10ap17

high

User can underpay the fee

high

User can underpay the fee in withdrawToNativeChain when setting amount lower then msg.value

medium

Incorrect amount passed to _doMixSwap in GatewayTransferNative

medium

Executing withdrawToNativeChain with Zeta as fromToken will not be possible

medium

WithdrawToNativeChain will not work when ZETA is fromToken since the function tries to call approve on native token

medium

transfer()/transferFrom() will not work with some of the tokens

Feb '25

Rova

1,178.30 USDC • 2 total findings • Sherlock • 10ap17

medium

Updating participation will break core functionalities

medium

Updating could not work

Jan '25

Plaza Finance

723.05 USDC • 1 total finding • Sherlock • 10ap17

#18

high

Incorrect price representation

Dec '24

Alchemix Transmuter

0.00 op • 1 total finding • CodeHawks • 10ap17

#30

low

Old router retains token allowance after update

Oku's New Order Types Contract Contest

4.01 OP • 2 total findings • Sherlock • 10ap17

#35

medium

Incorrect staleness check in `currentValue` function leading to use of stale prices

medium

Unspent token allowance blocks reuse of swap targets

Oct '24

Dria

0.87 USDC • 1 total finding • CodeHawks • 10ap17

#70

medium

Users can list assets with price < 1 ERC20 (ETH, WETH), leading to potential DoS vulnerability.