https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/c42cbb5a-062f-4053-99b8-4a85744b77a1.jpg

CarlosMB138

Security Researcher

Contact Me

High

Total

Medium

Total

$1.64K

Total Earnings

#1353 All Time

9x

Payouts

3x

Top 25

5x

Top 50

All

Sherlock

Code4rena

Immunefi

Aug '26

Audit Comp | Firelight

33 USDC • 20 total findings • Immunefi • CarlosMB

#23

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Audit Comp | Quantus

330 USDC • 4 total findings • Immunefi • CarlosMB

#17

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

Jul '26

Tare

7.82 USDC • Sherlock • CarlosMB138

#137

Metric

1.66 USDC • 2 total findings • Sherlock • CarlosMB138

#26

medium

Synthetic feed ratio is rounded down before constructing the ask, allowing token0 to be purchased below fair value

medium

Pyth exponent downscaling can materially underprice low-priced assets before executable quotes are constructed

Jun '26

DRE App - dreUSD

4.86 USDC • Sherlock • CarlosMB138

#123

Apr '26

Audit Comp | Base Azul

7 USDC • 1 total finding • Immunefi • CarlosMB

#85

medium

Finding not yet public.

K2

732.47 USDC • 1 total finding • Code4rena • CarlosMB

#14

medium

Permanent protocol brick via reserve ID exhaustion — drop_reserve retires IDs without recycling, causing irreversible init_reserve DoS after 64 cumulative markets

XRP Ledger - April 2026

187.21 USDC • Sherlock • CarlosMB138

#93

Mar '26

Audit Comp | Folks Finance: Staking Contracts

340 USDC • 1 total finding • Immunefi • CarlosMB

#42

medium

Finding not yet public.