https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_5.png

37H3RN17Y2

Security Researcher

Contact Me

High

6

Total

$1.11K

Total Earnings

#1271 All Time

4x

Payouts

gold

1x

1st Places

regular

3x

Top 10

regular

3x

Top 25

All

Sherlock

Jun '25

Superfluid Locker System

Superfluid Locker System

365.34 USDC • 1 total finding • Sherlock • 37H3RN17Y2

#8

high

Malicious user can bypass `FluidLocker::_pump` when providing liquidity to frontrun large tax distributions without pump commitment

May '25

LEND

LEND

68.19 USDC • 4 total findings • Sherlock • 37H3RN17Y2

#36

high

Malicious user can drain `CoreRouter` contract's LEND tokens, causing other users to be unable to claim their LEND tokens

high

Malicious user can steal `CoreRouter` liquidity, resulting in LPs unable to fully withdraw their supplied liquidity

high

Malicious user can borrow more than `maxBorrow` as `LendStorage::userCrossChainBorrows` is updated without accounting for the interest of the previous borrow

high

Cross-chain liquidations will fail as `CrossChainRouter::_handleLiquidationExecute` sends wrong payload to destination chain

Nov '24

Nouns DAO - Auction Streams

Nouns DAO - Auction Streams

578.45 USDC • Sherlock • 37H3RN17Y2

#10

vVv Launchpad - Investments & Token distribution

vVv Launchpad - Investments & Token distribution

94.59 USDC • 1 total finding • Sherlock • 37H3RN17Y2

gold

high

Malicious user/signer can frontrun investor's claim in `VVVVCTokenDistributor::claim`, causing loss of funds to the investor