Kalyan-Singh

Security Researcher

Learning about blockchain and web technologies

Contact Me

High

Total

Medium

Total

$10.23K

Total Earnings

#557 All Time

7x

Payouts

1x

1st Places

1x

3rd Places

2x

Top 10

All

Sherlock

Code4rena

Jun '25

DODO Cross-Chain DEX

0.26 USDC • 1 total finding • Sherlock • Kalyan-Singh

#72

medium

USDT will not function

Apr '25

Pareto USP, a credit-backed synthetic dollar

2,166.66 USDC • 1 total finding • Sherlock • Kalyan-Singh

medium

theft of funds for new depositers if sUSP can not absorb entire losses

Mar '24

Taiko

33.54 USDC • Code4rena • Kalyan-Singh

#36

Jan '24

Salty.IO

67.25 USDC • 3 total findings • Code4rena • Kalyan-Singh

#83

high

User can evade `liquidation` by depositing the minimum of tokens and gain time to not be liquidated

medium

Attacker Can Inflate LP Position Value To Create a Bad Debt Loan

medium

Remove Liquidity has missing reserve1 DUST check, which can make reserve1 to be less than DUST

reNFT

45.31 USDC • Code4rena • Kalyan-Singh

#46

Jul '23

Tokemak

7,843.81 USDC • 8 total findings • Sherlock • Kalyan-Singh

high

Incorrect Configuration for Curve read Re-entrancy checks

high

Rewards sent by destinationVault during withdrawal can be locked forever inside lmpVault

high

updateDebtReporting can be front run, putting all the loss on later withdrawals but taking the profit

high

queueNewRewards pulls in more reward token than expected leading to permanently stuck reward token

high

Rewards are stuck in LiquidationRow contract

high

Attacker Can Steal generated Profit & performance fees, due to attacker controlled totalSupply() usage in _collectFees

high

Wrong procedure of minting & staking in lmpVault leads to theft of all rewards

medium

LMPVault is not ERC4626 compliant as maxDeposits will revert randomly due to insufficient checks in _convertToAssets function

Jun '23

DODO V3

73.59 USDC • 1 total finding • Sherlock • Kalyan-Singh

#26

medium

Precision Loss