https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/af61e9ca-2c01-46dc-9354-76b539694599.jpeg

Brene

Security Researcher

Contact Me

High

Total

Medium

Total

$1.87K

Total Earnings

#1279 All Time

12x

Payouts

1x

1st Places

2x

Top 10

7x

Top 25

All

Sherlock

Code4rena

Cantina

Mar '26

Current Finance

184.41 USDC • 1 total finding • Sherlock • Brene

#18

medium

Passive LPs can lose accrued rewards when admin closes reward

Dec '25

Rujira

8.85 USDC • 3 total findings • Code4rena • Brene

#77

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Nov '25

Privacy Cash

71.86 USDC • Sherlock • Brene

#25

Findings not publicly available for private contests.

Aug '25

USG - Tangent

623.41 USDC • 4 total findings • Sherlock • Brene

#14

medium

Incorrect scaling of `getPtToSyRate` in `OraclePendlePT` leads to mispriced collateral

medium

Missing slippage protection when collateral is sent directly to liquidator

medium

Borrow pause incorrectly blocks collateral-only migrations

medium

First staker gains retroactive rewards due to un-updated `lastUpdateTime`

solayer-bridge

120 USDC • 1 total finding • Cantina • Brene

#36

medium

Finding not yet public.

Jul '25

Mellow Flexible Vaults

140.41 USDC • 3 total findings • Sherlock • Brene

#32

high

Consensus signature verification fails to enforce multi-signer threshold due to missing duplication

high

Off-By-One logic error in `handleReport` skips eligible deposits

medium

Incorrect transfer whitelist enforcement logic in `updateChecks`

May '25

LEND

72.67 USDC • 9 total findings • Sherlock • Brene

#34

high

Unscaled principle handling in `_handleValidBorrowRequest` leads to residual Cross-Chain collateral during full repayment

high

Stale `borrowIndex` in `redeem()` Leads to Incorrect Liquidity Checks

high

Cross-Chain liquidation uses collateral seize amount instead of repayment amount for debt reduction

high

Incorrect Borrowed Asset Tracking Enables Over-Borrowing

high

Incorrect chain identity check in `borrowWithInterest()` enables understated debt

high

`claimLend` function fails to update accrued lend leading to funds loss

medium

Incorrect borrow amount scaling in `liquidateBorrowAllowedInternal` leads to improper liquidation limits

medium

Liquidators Must Supply Collateral Asset Before Redeeming Seized Rewards

medium

Double scaling of borrowed amount via `borrowIndex`

Upside

189.47 USDC • Code4rena • Brene

Mar '25

StarkWare Perps

23.92 USDC • Code4rena • Brene

#22

Jan '25

IQ AI

3.58 USDC • Code4rena • Brene

#16

Oct '24

Kleidi

431.93 USDC • 1 total finding • Code4rena • Brene

medium

Gas griefing/attack via creating the proposals

Aug '24

Chakra

0.1 USDT • 2 total findings • Code4rena • Brene

#62

high

There is no refund mechanism in `ChakraSettlement.processCrossChainCallback` or `ChakraSettlementHandler.receive_cross_chain_callback` function

high

SettlementSignatureVerifier is missing check for duplicate validator signatures