https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/4a335743-ee99-4bbf-ab7f-fc8262527348.jpg

Darinrikusham

Security Researcher

Making web3 safer

Contact Me

High

3

Total

Medium

1

Total

$1.71K

Total Earnings

#1076 All Time

4x

Payouts

regular

3x

Top 10

regular

3x

Top 25

regular

3x

Top 50

All

Sherlock

Code4rena

Mar '25

Crestal Network

Crestal Network

77.23 USDC • 1 total finding • Sherlock • Darinrikusham

#5

medium

Non whitelisted user can also create agent by calling createAgentWithNFT instead of createAgentWithWhitelistUsers affecting the motive of protocol to only allow whitelisted user to create agent

Jan '25

Liquid Ron

Liquid Ron

0.03 USDC • 1 total finding • Code4rena • Darinrikusham

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

Plaza Finance

Plaza Finance

1.98 USDC • 1 total finding • Sherlock • Darinrikusham

#92

high

Due to mistake in fees calculation logic considering the reserve token balance of pool at the time of claiming fees protocol would not be able to claim the actual fees amount in different duration leading to incorrect or loss in fees funds for protocol

Mar '24

Amphor

Amphor

1,632.33 USDC • 1 total finding • Sherlock • Darinrikusham

#4

high

when user deposits assets during lock period they will rely on vault to open to determine how many shares will be allocated to them as there is no method to determine shares during lock period and after the `open` function is called by protocol, users will come to know shares allocated to them and after that if users are not convinced with it and want to redeem those shares and get deposited asset back they will receive assets less then deposited due to calculation method implimented in `previewSettle` function for `sharesToMint` calculation.