IceBear

Security Researcher

Contact Me

High

Total

Medium

Total

$1.53K

Total Earnings

#1100 All Time

28x

Payouts

1x

Top 10

12x

Top 25

18x

Top 50

All

Sherlock

Code4rena

Feb '25

THORWallet

0.35 USDC • 1 total finding • Code4rena • IceBear

high

MergeTgt has no handling if TGT_TO_EXCHANGE is exceeded during the exchange period

Jan '25

Liquid Ron

0 USDC • 1 total finding • Code4rena • IceBear

#12

medium

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

IQ AI

3.58 USDC • 1 total finding • Code4rena • IceBear

#16

medium

Ineffective proposal threshold validation allows setting arbitrary high values

Mar '24

Ondo Finance

8.28 USDC • Code4rena • IceBear

#17

Smart Wallet

36.34 USDC • Code4rena • IceBear

#14

Jan '24

Decent

12.28 USDC • Code4rena • IceBear

#54

Salty.IO

133.99 USDC • 1 total finding • Code4rena • IceBear

#59

medium

changeWallets() can be confirmed immediately after proposalWallets() by manipulating activeTimelock beforehand

Curves

0 USDC • 1 total finding • Code4rena • IceBear

#137

high

Unauthorized Access to setCurves Function

Oct '23

Real Wagmi #2

88.51 USDC • 1 total finding • Sherlock • IceBear

#17

high

Use of slot0 to get sqrtPriceLimitX96 can lead to price manipulation.

Canto Liquidity Mining Protocol

4.94 USDC • Code4rena • IceBear

#19

Sep '23

Venus Prime

4.37 USDC • Code4rena • IceBear

#39

Centrifuge

50.43 USDC • 1 total finding • Code4rena • IceBear

#31

medium

```trancheTokenAmount``` should be rounded UP when proceeding to a withdrawal or previewing a withdrawal.

Aug '23

Dopex

42.29 USDC • 1 total finding • Code4rena • IceBear

#97

medium

A malicious early depositor can manipulate the `LP-Token` price per share to take an unfair share of future user deposits

Tangible Caviar

0.72 USDC • Code4rena • IceBear

#86

Jul '23

PoolTogether

0 USDC • 1 total finding • Code4rena • IceBear

#68

medium

Vault does not conform to ERC4626

Tapioca DAO

0 USDC • 1 total finding • Code4rena • IceBear

#92

medium

`ARBTriCryptoOracle` is vulnerable to read-only reentrancy

Jun '23

Lybra Finance

650 USDC • 1 total finding • Code4rena • IceBear

#16

medium

CLOCK_MODE() will not work properly for Arbitrum or Optimism due to block.number

May '23

Iron Bank

0.00 USDC • 1 total finding • Sherlock • IceBear

#25

medium

Lack of sufficient validation for chainlink price feed

Venus Protocol Isolated Pools

56.63 USDC • Code4rena • IceBear

#42

Apr '23

ENS Contest

59.79 USDC • Code4rena • IceBear

#20

Frankencoin

22.6 USDC • Code4rena • IceBear

#66

Mar '23

Canto Identity Subprotocols contest

22.77 USDC • Code4rena • IceBear

#27

Neo Tokyo contest

29.67 USDC • Code4rena • IceBear

#21

Aragon Protocol contest

72.43 USDC • Code4rena • IceBear

#14

Feb '23

Ethos Reserve contest

61.26 USDC • Code4rena • IceBear

#33

Jan '23

Popcorn contest

35.48 USDC • Code4rena • IceBear

#84

RabbitHole Quest Protocol contest

17.2 USDC • Code4rena • IceBear

#74

Reserve contest

121.59 USDC • Code4rena • IceBear

#26