Security Researcher
High
Total
Medium
Total Earnings
#2275 All Time
Payouts
Top 10
Top 25
Top 50
All
Sherlock
Nov '25
12.87 USDC • 2 total findings • Sherlock • IzuMan
#29
high
`stNXM::removeTokenIdAtIndex` and `stakeNxm` can manipulate the stNXM contracts `totalAssets`
medium
`stNXM::extendDeposit` can stake NXM into an untracked tranche id
Sep '25
5.61 OP • 2 total findings • Sherlock • IzuMan
#44
SuperDCListing::collectFees will always revert with pools that have the native token
`SuperDCAStaking::lastMinted` timestamp should not be updated during stake and unstake events
Mar '25
21.74 USDC • 2 total findings • Sherlock • IzuMan
#8
`Payment::payWithERC20` can be used to drain the contract of all ERC20 tokens
`BlueprintCore::updateWorkerDeploymentConfigWithSig` is vulnerable to signature replays
Dec '24
4.52 OP • 2 total findings • Sherlock • IzuMan
#61
Attacker can drain the Treasury of Funds by calling `CDS::redeemUSDT`
`borrowing::depositTokens` user can set the volatility of ethereum decreasing option fees
Nov '24
7.88 USDC • 1 total finding • Sherlock • IzuMan
#54
The purchased ERC721 token is locked in the `BuyOrder` contract
