Hama

Security Researcher

Contact Me

High

Total

Medium

Total

$923.00

Total Earnings

#1255 All Time

17x

Payouts

1x

Top 10

5x

Top 25

9x

Top 50

All

Sherlock

Code4rena

Dec '24

SecondSwap

0 USDC • 1 total finding • Code4rena • Hama

#67

high

Users can claim more that their actual allotment

Dec '23

DODO GSP

172.15 USDC • 1 total finding • Sherlock • Hama

medium

First depositor can abuse exchange rate to steal funds from later depositors

Oct '23

NextGen

25.24 USDC • 2 total findings • Code4rena • Hama

#81

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

medium

Auction payout goes to AuctionDemo contract owner, not the token owner

Sep '23

Venus Prime

4.37 USDC • Code4rena • Hama

#39

Maia DAO - Ulysses

0.11 USDC • 1 total finding • Code4rena • Hama

#62

high

All tokens can be stolen from `VirtualAccount` due to missing access modifier

Aug '23

Cooler Update

25.53 USDC • 1 total finding • Sherlock • Hama

#17

high

Lender force Loan become default

Dopex

46.25 USDC • 1 total finding • Code4rena • Hama

#94

medium

A malicious early depositor can manipulate the `LP-Token` price per share to take an unfair share of future user deposits

Tangible Caviar

0.72 USDC • Code4rena • Hama

#86

Good Entry

250.17 USDC • 1 total finding • Code4rena • Hama

#20

medium

First depositor can break minting of liquidity shares in GeVault

Jul '23

Moonwell

104.41 USDC • 1 total finding • Code4rena • Hama

#32

medium

missing check for the max/min price in the `chainlinkOracle.sol` contract

Amphora Protocol

9.43 USDC • 1 total finding • Code4rena • Hama

#23

high

Reentrancy issue with the 'withdraw' method of USDC. All tokens could be drained.

Jun '23

Lybra Finance

29.06 USDC • 1 total finding • Code4rena • Hama

#76

medium

`stakerewardV2pool.withdraw()` should check the user's boost lock status.

Hubble Exchange

202.01 USDC • 2 total findings • Sherlock • Hama

#26

medium

Chainlink’s latestRoundData might return stale or incorrect results

medium

Chainlink Oracle will return the wrong price for asset if underlying aggregator hits minAnswer

Stader Labs

31.8 USDC • 1 total finding • Code4rena • Hama

#34

medium

Chainlink's `latestRoundData` may return stale or incorrect result

May '23

Maia DAO Ecosystem

0 USDC • 1 total finding • Code4rena • Hama

#71

medium

## vMaia is an ERC-4626 compliant but maxWithdraw & maxRedeem functions are not fully up to EIP-4626's specification

Iron Bank

0.00 USDC • 1 total finding • Sherlock • Hama

#25

medium

Chainlink’s latestRoundData Might Return Stale Results

Apr '23

Frankencoin

22.6 USDC • Code4rena • Hama

#66