https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/1c7ee5fa-4a4c-46be-9a29-7c7a61a00dfb.jpg

Alpha

Security Researcher

Smart contract auditor

Contact Me

High

7

Total

Medium

7

Total

$26.80K

Total Earnings

#310 All Time

8x

Payouts

gold

1x

1st Places

regular

1x

Top 10

regular

3x

Top 25

All

Code4rena

Cantina

CodeHawks

Immunefi

Mar '25

Attackathon | Movement Labs

Attackathon | Movement Labs

290 USDC • 1 total finding • Immunefi • p4y4b13

#31

low

Finding not yet public.

badger-ebtc-bsm

badger-ebtc-bsm

203.82 USDC • 2 total findings • Cantina • 0xVI-Badger

#15

high

Finding not yet public.

medium

Finding not yet public.

Feb '25

Liquidity Management

Liquidity Management

184.74 usdc • 3 total findings • CodeHawks • 0xVI

#26

medium

PerpetualVault can be completely bricked

low

Cancelling a Flow after a Position Is Created Might Result in Inflation/Deflation of Shares

low

Fees not refunded to users on position closed and funds locked/lost

Jan '25

Initia Move

Initia Move

26,055.75 USDC • 3 total findings • Code4rena • p4y4b13

gold

high

Domain pricing relies on pool price, which can be manipulated

high

User can bypass `MAX_EXPIRATION` when extend expiration

high

Extending a domain's expiration even after the grace period impacts domain buyers

Nov '24

hyperlend

hyperlend

43.12 USDC • 1 total finding • Cantina • p4y4b13

#16

high

Finding not yet public.

Oct '24

Dria

Dria

19.03 USDC • 4 total findings • CodeHawks • Gladiators

#44

medium

Platform fees withdrawal will sweep oracle agents earned fees

medium

Request responses and validations can be mocked leading to extraction of fees and/or forcing other generators to lose their fees by making them outliers

medium

Unrestricted validation score range for validators in `LLMOracleCoordinator::validate`.

medium

Users can list assets with price < 1 ERC20 (ETH, WETH), leading to potential DoS vulnerability.

Aug '24

Chakra

Chakra

1.78 USDT • 2 total findings • Code4rena • Subroutine

#58

high

Anyone can manipulate user nonce (nonce_manager) in settlement contract

high

SettlementSignatureVerifier is missing check for duplicate validator signatures

Jul '23

Beedle - Oracle free perpetual lending

Beedle - Oracle free perpetual lending

0.26 USDC • 2 total findings • CodeHawks • p4y4b13

#211

medium

Single-step process for critical ownership transfer is risky

gas

Unnecessary If condition in update() of Staking.sol