https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_2.png

CodingNameKiki

Security Researcher

Contact Me

High

7

Total

Medium

1

Solo

13

Total

$10.21K

Total Earnings

#650 All Time

37x

Payouts

bronze

1x

3rd Places

regular

7x

Top 10

regular

21x

Top 25

All

Sherlock

Code4rena

Jun '23

GLIF

GLIF

515.22 USDC • Sherlock • CodingNameKiki

#10

Findings not publicly available for private contests.

Apr '23

Caviar Private Pools

Caviar Private Pools

112.97 USDC • 2 total findings • Code4rena • CodingNameKiki

#38

medium

Incorrect protocol fee is taken when changing NFTs

medium

Royalty recipients will not get fair share of royalties

Mar '23

Asymmetry contest

Asymmetry contest

176.58 USDC • 2 total findings • Code4rena • CodingNameKiki

#36

high

A temporary issue shows in the staking functionality which leads to the users receiving less minted tokens.

medium

Missing derivative limit and deposit availability checks will revert the whole `stake()` function

Feb '23

Volta

Volta

485.29 USDC • Sherlock • CodingNameKiki

#7

Findings not publicly available for private contests.

Union Finance Update

Union Finance Update

487.80 USDC • 1 total finding • Sherlock • CodingNameKiki

bronze

medium

Users can lose their staking rewards.

Jan '23

RabbitHole Quest Protocol contest

RabbitHole Quest Protocol contest

508.78 USDC • 4 total findings • Code4rena • CodingNameKiki

#11

high

Protocol fees can be withdrawn multiple times in `Erc20Quest`

medium

Buyer on secondary NFT market can lose fund if they buy a NFT that is already used to claim the reward

medium

Users may not claim Erc1155 rewards when the Quest has ended

medium

User may loose rewards if the receipt is minted after quest end time

Nov '22

Isomorph

Isomorph

589.50 USDC • 3 total findings • Sherlock • CodingNameKiki

#11

high

The variable `totalUSDborrowed` is wrongly calculated in the function openLoan in Vault_Synths. Users who want to increase their loans will receive less isoUSD.

high

Malicious user can burn the approved NFTs to the depositer contract and successfully steal owner's AMM tokens.

medium

`CHANGE_COLLATERAL_DELAY` contains a wrong number.

Oct '22

Union Finance

Union Finance

1,072.39 USDC • 1 total finding • Sherlock • CodingNameKiki

#10

high

Users won't be able to repay their overduе borrows, duo to a simple mistake made in the function `updateFrozenInfo`.

Merit Circle

Merit Circle

257.01 USDC • 1 total finding • Sherlock • CodingNameKiki

#9

high

Two malicious users can drain a big amount of rewards up to 48 weeks, for the little lock time of 10 mins.

Mycelium

Mycelium

109.26 USDC • 1 total finding • Sherlock • CodingNameKiki

#8

medium

Malicious user will prevent anyone from getting shares on their deposited amount of LINK to the vault

Sep '22

Frax Ether Liquid Staking contest

Frax Ether Liquid Staking contest

58.05 USDC • 1 total finding • Code4rena • CodingNameKiki

#44

medium

frxETHMinter: Non-conforming ERC20 tokens not recoverable

Harpie

Harpie

45.24 USDC • 2 total findings • Sherlock • CodingNameKiki

#18

medium

transferfrom can lead to permanently loosing the NFT token.

medium

Usage of deprecated transfer() can result in revert.

Aug '22

FIAT DAO veFDT contest

FIAT DAO veFDT contest

394.44 USDC • 1 total finding • Code4rena • CodingNameKiki

#15

high

Unsafe usage of ERC20 transfer and transferFrom

Foundation Drop contest

Foundation Drop contest

33.77 USDC • 1 total finding • Code4rena • CodingNameKiki

#62

medium

NFT of NFT collection or NFT drop collection can be locked when calling _mint or mintCountTo function to mint it to a contract that does not support ERC721 protocol