https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_0.png

Josh4324

Security Researcher

Contact Me

High

5

Total

Medium

2

Total

$52.00

Total Earnings

#1963 All Time

5x

Payouts

bronze

1x

3rd Places

regular

1x

Top 10

regular

3x

Top 25

All

Sherlock

Code4rena

Feb '25

Yieldoor

Yieldoor

48.11 USDC • 1 total finding • Sherlock • Josh4324

#16

high

Uninitialized feeRecipient in Leverager.sol

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • Josh4324

bronze

medium

Incorrect Handling of Token Amount Updates in updateParticipation

Jan '25

Liquid Ron

Liquid Ron

0.02 USDC • 2 total findings • Code4rena • Josh4324

#11

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

medium

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

Apr '24

DYAD

DYAD

3.82 USDC • 1 total finding • Code4rena • Josh4324

#109

high

Unable to withdraw Kerosene from `vaultmanagerv2::withdraw` as it expects a `vault.oracle()` method which is missing in Kerosene vaults

Feb '24

AI Arena

AI Arena

0.1 USDC • 2 total findings • Code4rena • Josh4324

#183

high

A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters

high

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`