https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_5.png

CL001

Security Researcher

Contact Me

High

9

Total

Medium

1

Solo

11

Total

$3.78K

Total Earnings

#829 All Time

16x

Payouts

bronze

1x

3rd Places

regular

4x

Top 10

regular

9x

Top 25

All

Sherlock

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

10.63 USDC • Sherlock • CL001

#48

Symmio, Staking and Vesting

Symmio, Staking and Vesting

68.35 USDC • 1 total finding • Sherlock • CL001

#11

high

The precision loss in _addRewardsForToken function will cause a partial loss of rewards

Feb '25

Yieldoor

Yieldoor

0.09 USDC • 1 total finding • Sherlock • CL001

#28

medium

In the withdraw function, the code erroneously uses amountOut0 (instead of the correct amountOut1) to calculate repayment amounts.

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • CL001

bronze

medium

The updateParticipation function incorrectly updates the total tokens requested.

Jan '25

Plaza Finance

Plaza Finance

52.71 USDC • 1 total finding • Sherlock • CL001

#48

medium

DOS on redeems tokens due to underflow in collateralLevel computation

Dec '24

Autonomint Colored Dollar V1

Autonomint Colored Dollar V1

47.36 OP • 3 total findings • Sherlock • CL001

#32

high

lastCumulativeRate is not updated before calculating borrowerDebt

medium

Incorrect calculation of totalVolumeOfBorrowersAmountinWei when withdraw Collateral from the protocol

medium

LastEthprice is not updated after the user deposits collateral into the protocol

Nov '24

Debita Finance V3

Debita Finance V3

32.94 USDC • 2 total findings • Sherlock • CL001

#40

high

After the buyOrder is completed, the order creator does not receive the NFT

medium

Users who turns malicious can drain incentives by lend to themselves

May '24

Elfi

Elfi

289.41 USDC • 2 total findings • Sherlock • CL001

#18

high

User cannot redeem stake tokens

high

Users can avoid paying borrowing fees

Apr '24

Zivoe

Zivoe

10.48 USDC • 2 total findings • Sherlock • CL001

#52

high

User cannot withdraw stakingToken due to incorrect calculation of _totalSupply

high

malicious users can deposit 0 amount of rewards to lower the rewardRate, which will result in loss of rewards for the normal users

Mar '24

vVv Vesting & Staking

vVv Vesting & Staking

26.23 USDC • Sherlock • CL001

#28

Jan '24

Flat Money

Flat Money

367.39 USDC • 2 total findings • Sherlock • CL001

#13

high

Unexpected revert during announce and execute delayed orders

medium

User can abuse of settleFundingFees method to prevent being liquidated

Notional Update #5

Notional Update #5

562.92 USDC • 1 total finding • Sherlock • CL001

#7

medium

convertToShares method calculation is not accurate

Truflation

Truflation

90.28 USDC • 1 total finding • Sherlock • CL001

#9

high

Calculation of the claimable amount is not accurate

Dec '23

Olympus RBS 2.0

Olympus RBS 2.0

32.55 USDC • 1 total finding • Sherlock • CL001

#17

medium

getWeightedPoolTokenPrice() method in BalancerPoolTokenPrice.sol wrongly assumes that all of the weighted pools uses totalSupply()

Nov '23

Convergence

Convergence

65.70 USDC • 1 total finding • Sherlock • CL001

#14

medium

Using the predicted value as Minimum amount of reward to receive may result in user losses

Oct '23

Ajna #2

Ajna #2

2,125 USDC • 1 total finding • Sherlock • CL001

#4

medium

Wrong auctionPrice used in calculating BPF to determine bond reward (or penalty)