JMukesh

Security Researcher

Contact Me

High

Total

Medium

Total

$45.71K

Total Earnings

#212 All Time

38x

Payouts

23x

Top 10

31x

Top 25

36x

Top 50

All

Code4rena

Oct '22

Trader Joe v2 contest

0.33 USDC • 1 total finding • Code4rena • JMukesh

#31

high

Transfering funds to yourself increases your balance

Jun '22

Nibbl contest

28.29 USDC • Code4rena • JMukesh

#61

Canto contest

436.19 USDC • 1 total finding • Code4rena • JMukesh

#35

high

Anyone can set the `baseRatePerYear` after the `updateFrequency` has passed

Connext Amarok contest

163.33 USDC • Code4rena • JMukesh

#47

May '22

Rubicon contest

60.41 USDC • 2 total findings • Code4rena • JMukesh

#74

medium

Use `safeTransfer()`/`safeTransferFrom()` instead of `transfer()`/`transferFrom()`

medium

Use `call()` instead of `transfer()` when transferring ETH in RubiconRouter

Enso Finance contest

1,355.15 USDT • Code4rena • JMukesh

#21

Apr '22

JPEG'd contest

259.27 USDC • 1 total finding • Code4rena • JMukesh

#28

medium

Chainlink pricer is using a deprecated API

Mar '22

LI.FI contest

1,082.75 USDC • 2 total findings • Code4rena • JMukesh

#20

medium

WithdrawFacet's withdraw calls native payable.transfer, which can be unusable for DiamondStorage owner contract

medium

LibSwap: Excess funds from swaps are not returned

Biconomy Hyphen 2.0 contest

378.21 USDT • 1 total finding • Code4rena • JMukesh

#27

medium

A `pauser` can brick the contracts

Dec '21

Amun contest

2,862.52 USDC • 2 total findings • Code4rena • JMukesh

medium

ERC20 return values not checked

medium

Unchecked return value from low-level call()

Nov '21

FairSide contest

81.35 ETH • 1 total finding • Code4rena • JMukesh

#12

medium

Eth may get stuck in contract

Boot Finance contest

707.6 USDC • Code4rena • JMukesh

#13

Oct '21

BadgerDAO ibBTC Wrapper contest

1,274.33 ETH • Code4rena • JMukesh

Tally contest

461.32 ETH • 1 total finding • Code4rena • JMukesh

medium

Swap.sol implements potentially dangerous transfer

Ambire contest

27.68 USDC • Code4rena • JMukesh

Sep '21

Swivel contest

1,505.93 ETH • 1 total finding • Code4rena • JMukesh

#12

high

Unsafe handling of underlying tokens

Kuiper contest

1,043.18 USDC • 2 total findings • Code4rena • JMukesh

#13

medium

Use safeTransfer instead of transfer

medium

`burn` and `mintTo` in `Basket.sol` vulnerable to reentrancy

Sushi Trident contest phase 1

998.28 USDC • Code4rena • JMukesh

#12

Sushi Miso contest

5,314.71 USDC • 1 total finding • Code4rena • JMukesh

medium

use of transfer() instead of call() to send eth

bveCVX by BadgerDAO contest

2,894.58 tokens) • Code4rena • JMukesh

Aug '21

Notional contest

5,666.24 USDC • 2 total findings • Code4rena • JMukesh

medium

Use of transfer() instead of call() to send eth

medium

Missing validation on latestRoundData

Gravity Bridge contest

381.01 USDC • Code4rena • JMukesh

Reality Cards contest

2,217.98 tokens) • 2 total findings • Code4rena • JMukesh

high

Unchecked ERC20 transfers can cause lock up

medium

Uninitialized Variable `marketWhitelist` in `RCTreasury.sol`

Yield micro contest #1

707.33 USDC • 1 total finding • Code4rena • JMukesh

medium

No ERC20 safe* versions called

Float Capital contest

922.45 USDC • Code4rena • JMukesh

Jul '21

PoolTogether micro contest #1

310.48 USDC • Code4rena • JMukesh

#10

Spartan Protocol contest

516.79 USDC • 1 total finding • Code4rena • JMukesh

#12

high

Result of transfer / transferFrom not checked

Wild Credit contest

1,470.21 USDC • 1 total finding • Code4rena • JMukesh

medium

safeTransferFrom in TransferHelper is not safeTransferFrom

Jun '21

Tracer contest

2,191.84 USDC • 1 total finding • Code4rena • JMukesh

medium

No check transferFrom() return value

PoolTogether contest

1,552.12 USDC • 1 total finding • Code4rena • JMukesh

medium

Return values of ERC20 `transfer` and `transferFrom` are unchecked

Reality Cards contest

395.58 USDC • 2 total findings • Code4rena • JMukesh

#10

high

Unchecked ERC20 transfers can cause lock up

medium

Uninitialized Variable `marketWhitelist` in `RCTreasury.sol`

May '21

FairSide contest

1,441.12 USDC • 1 total finding • Code4rena • JMukesh

medium

Eth may get stuck in contract

Visor contest

1,086.18 USDC • Code4rena • JMukesh

88mph contest

0 USDC • Code4rena • JMukesh

NFTX contest

891.75 USDC • 1 total finding • Code4rena • JMukesh

#10

medium

Randomization of NFTs returned in redeem/swap operations can be brute-forced

Apr '21

LarvaLabs Meebits Contest

2,005.35 USDC • 1 total finding • Code4rena • JMukesh

medium

instead of call() , transfer() is used to withdraw the ether

Vader Protocol contest

2,247.13 USDC • 1 total finding • Code4rena • JMukesh

high

Anyone Can Avoid All Vether Transfer Fees By Adding Their Address to the Vether ExcludedAddresses List.

Maple Finance contest

775.86 USDC • Code4rena • JMukesh