default

Demonhatz

Security Researcher

Contact Me

High

4

Total

Medium

6

Total

$8.92K

Total Earnings

#717 All Time

2x

Payouts

regular

2x

Top 10

regular

2x

Top 25

regular

2x

Top 50

All

Sherlock

Apr '26

XRP Ledger - April 2026

XRP Ledger - April 2026

6,631.35 USDC • 6 total findings • Sherlock • Demonhatz

#8

high

An attacker will block AMM, Vault, or LoanBroker teardown and force repeated deletion failures for protocol owners

high

MPT Clawback from AMM Permanently Blockable via MPToken Deletion + Single-Asset XRP Withdrawal

medium

An unauthorized payer will deliver restricted MPTs to unauthorized recipients through an AMM after issuer revocation

medium

An attacker will create unbacked ledger objects and impose irreversible reserve deficits on the protocol

medium

Sender will make valid confidential transfers undecryptable for recipients

medium

Vault sponsor reserve permanently locked — SponsorshipTransfer is silently blocked by ValidVault invariant on every vault SLE

Mar '26

Current Finance

Current Finance

2,288.45 USDC • 4 total findings • Sherlock • Demonhatz

#6

high

Liquidity mining reward manager will permanently lock pool rewards for all users as arithmetic overflow occurs during reward calculation

high

Liquidation uses EMA for trigger but spot for seizure, enabling over-seizure and bad debt creation

medium

Depositors will bypass the deposit cap causing excess protocol exposure due to double subtraction of `cash_reserve`

medium

Rate limiter cross-segment deposits do not offset withdrawals, causing legitimate withdrawals to revert