https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/7d4571dc-b740-479d-bb4e-cd5c91067b6e.jpg

Angry_Mustache_Man

Security Researcher

Smart Contract Security Researcher 🛡 || watson @sherlockdefi || warden @code4rena

Contact Me

High

Total

Medium

Total

$19.85K

Total Earnings

#401 All Time

17x

Payouts

1x

3rd Places

7x

Top 10

9x

Top 25

All

Sherlock

Code4rena

Cantina

CodeHawks

Jul '25

Malda

1,234.20 USDC • 4 total findings • Sherlock • Angry_Mustache_Man

#11

high

`REBALANCER_EOA` can steal User funds by setting arbitrary `receiver` in EverclearBridge.sendMsg

medium

Everclear Bridge does not consider fee amount in it's approvals causing revert at all times

medium

Everclear bridge never retrieves the approved tokens from Rebalancer contract making it unusable

medium

Slippage calculated in `migrateAllPositions` uses Wrong Unit (Underlying vs. mToken), Allowing Protection Bypass

DeBank

39.28 USDC • Sherlock • Angry_Mustache_Man

#51

Jun '25

Superfluid Locker System

127.37 USDC • 1 total finding • Sherlock • Angry_Mustache_Man

high

Reuse of staked amount to provide liquidity is possible in `FluidLocker.sol`

Jan '25

doppler-contracts

3,153.73 USDC • 2 total findings • Cantina • AngryMustacheMan

high

Finding not yet public.

medium

Finding not yet public.

silo-contracts-v2

5,344.62 USDC • 2 total findings • Cantina • AngryMustacheMan

#10

high

Finding not yet public.

medium

Finding not yet public.

Dec '24

QuantAMM

363.60 op • 3 total findings • CodeHawks • angrymustacheman

#27

high

Owner fee will be locked in `UpliftOnlyExample` contract due to incorrect recipient address in `UpliftOnlyExample::onAfterSwap`

medium

If main oracle is removed from approved list it will keep returning not stale but invalid data (0 value)

low

Fee Bypass Through Precision Loss in Low-Decimal Tokens

bima-money

5,005.96 USDC • 1 total finding • Cantina • AngryMustacheMan

medium

Finding not yet public.

Sep '24

Liquid Staking

3,066.67 USDC • 1 total finding • CodeHawks • angrymustacheman

medium

Principal amount of removed operator get's stuck in Chainlink's Staking Contract forever

Apr '24

DYAD

7.32 USDC • 2 total findings • Code4rena • Angry_Mustache_Man

#102

high

Attacker can make 0 value deposit() calls to deny user from redeeming or withdrawing collateral

high

Kerosene collateral is not being moved on liquidation, exposing liquidators to loss

Oct '23

Steadefi

108.91 USDC • 1 total finding • CodeHawks • angrymustacheman

#30

medium

Front-Run Attacks Due Slippage Mishandling Lead to Total Losses For Depositors

Aug '23

PoolTogether V5: Part Deux

1,114.7 USDC • 2 total findings • Code4rena • Angry_Mustache_Man

medium

The ContinuousGDA implementation is incorrect leading to liquidation auctions running at the wrong price

medium

_computeAvailable() the calculations are wrong

Jul '23

Tokemak

78.14 USDC • 2 total findings • Sherlock • Angry_Mustache_Man

#46

high

Absence of Approval causes DOS/Revertion at all times

high

Wrong approvals causes Complete Denial of Service of Liquidation Process

Beam

33.80 USDC • Sherlock • Angry_Mustache_Man

#33

May '23

Iron Bank

109.39 USDC • 3 total findings • Sherlock • Angry_Mustache_Man

#10

medium

Chainlink's latestRoundData return stale or incorrect result

medium

Missing checks for whether L2 Sequencer is active

medium

PriceOracle will return the wrong price for asset if underlying aggregator hits minPrice

USSD - Autonomous Secure Dollar

36.61 USDC • 5 total findings • Sherlock • Angry_Mustache_Man

#46

high

No slippage parameter has been passed for "UniV3SwapInput" function

high

Lack of Access Control for "mintRebalancer" &"burnRebalancer" function

high

More DAI is brought than what is needed for the protocol

medium

Chainlink's `latestRoundData` might return stale or incorrect results

medium

Not checking balance of collateral before removing it.

Mar '23

Asymmetry contest

10.79 USDC • Code4rena • Angry_Mustache_Man

#115

Neo Tokyo contest

19.3 USDC • Code4rena • Angry_Mustache_Man

#22