Security Researcher
High
Total
Medium
Solo
Total Earnings
#813 All Time
Payouts
3rd Places
Top 10
Top 25
All
Sherlock
Mar '25
68.35 USDC • 1 total finding • Sherlock • CL001
#11
high
The precision loss in _addRewardsForToken function will cause a partial loss of rewards
Feb '25
0.09 USDC • 1 total finding • Sherlock • CL001
#28
medium
In the withdraw function, the code erroneously uses amountOut0 (instead of the correct amountOut1) to calculate repayment amounts.
0.04 USDC • 1 total finding • Sherlock • CL001
The updateParticipation function incorrectly updates the total tokens requested.
Jan '25
52.71 USDC • 1 total finding • Sherlock • CL001
#48
DOS on redeems tokens due to underflow in collateralLevel computation
Dec '24
47.36 OP • 3 total findings • Sherlock • CL001
#32
lastCumulativeRate is not updated before calculating borrowerDebt
Incorrect calculation of totalVolumeOfBorrowersAmountinWei when withdraw Collateral from the protocol
LastEthprice is not updated after the user deposits collateral into the protocol
Nov '24
32.94 USDC • 2 total findings • Sherlock • CL001
#40
After the buyOrder is completed, the order creator does not receive the NFT
Users who turns malicious can drain incentives by lend to themselves
May '24
289.41 USDC • 2 total findings • Sherlock • CL001
#18
User cannot redeem stake tokens
Users can avoid paying borrowing fees
Apr '24
10.48 USDC • 2 total findings • Sherlock • CL001
#52
User cannot withdraw stakingToken due to incorrect calculation of _totalSupply
malicious users can deposit 0 amount of rewards to lower the rewardRate, which will result in loss of rewards for the normal users
Mar '24
26.23 USDC • Sherlock • CL001
Jan '24
367.39 USDC • 2 total findings • Sherlock • CL001
#13
Unexpected revert during announce and execute delayed orders
User can abuse of settleFundingFees method to prevent being liquidated
562.92 USDC • 1 total finding • Sherlock • CL001
#7
convertToShares method calculation is not accurate
90.28 USDC • 1 total finding • Sherlock • CL001
#9
Calculation of the claimable amount is not accurate
Dec '23
32.55 USDC • 1 total finding • Sherlock • CL001
#17
getWeightedPoolTokenPrice() method in BalancerPoolTokenPrice.sol wrongly assumes that all of the weighted pools uses totalSupply()
Nov '23
65.70 USDC • 1 total finding • Sherlock • CL001
#14
Using the predicted value as Minimum amount of reward to receive may result in user losses
Oct '23
2,125 USDC • 1 total finding • Sherlock • CL001
#4
Wrong auctionPrice used in calculating BPF to determine bond reward (or penalty)