https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/526c93d4-0b6d-4016-8a2e-413ddf1bc844.jpg

Kirkeelee

Security Researcher

Web3 security researcher.

Contact Me

High

7

Total

Medium

11

Total

$19.06K

Total Earnings

#378 All Time

26x

Payouts

gold

1x

1st Places

silver

1x

2nd Places

bronze

3x

3rd Places

All

Sherlock

Code4rena

Cantina

CodeHawks

Hats Finance

Apr '25

Seamless Protocol - Leverage Tokens

Seamless Protocol - Leverage Tokens

Collaborative Audit • Sherlock • Kirkeelee

Feb '25

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • Kirkeelee

bronze

medium

`maxTokenAmountPerUser` limit can be bypassed when currency token has less decimals than the launch token.

Liquidity Management

Liquidity Management

1,324.65 usdc • 2 total findings • CodeHawks • kirkeelee

#7

medium

PerpetualVault can be completely bricked

medium

ADL can result in unwrapped ETH as output which is not handled

Jan '25

Part 2

Part 2

81.92 usdc • 2 total findings • CodeHawks • kirkeelee

#48

high

Vaults weth reward is not distributed correctly

high

Unclaimed Rewards Loss Due to Missing Validation in `VaultRouterBranch.stake()`

Plaza Finance

Plaza Finance

5.50 USDC • 2 total findings • Sherlock • Kirkeelee

#82

high

Large redeems before fee claims reduce collectible fees

medium

BalancerRouter.sol does not return excess user funds at certain conditions.

FlatMoney v2 Update

FlatMoney v2 Update

325.31 USDC • Sherlock • Kirkeelee

#10

Findings not publicly available for private contests.

Dec '24

Autonomint Colored Dollar V1

Autonomint Colored Dollar V1

0.18 OP • 1 total finding • Sherlock • Kirkeelee

#66

high

Anyone can steal USDT from the protocol using the redeemUSDT function.

Nov '24

Chiliz Chain System Contracts

Chiliz Chain System Contracts

195.98 USDC • Sherlock • Kirkeelee

#13

Findings not publicly available for private contests.

Oct '24

Covalent - EWM Light Client

Covalent - EWM Light Client

453.76 USDC • Sherlock • Kirkeelee

bronze

Findings not publicly available for private contests.

Index x Morpho Leverage Integration

Index x Morpho Leverage Integration

12,000 USDC • 1 total finding • Sherlock • Kirkeelee

gold

medium

_calculateMaxBorrowCollateral function will revert in extreme market conditions leading to liquidations.

AXION

AXION

162.74 USDC • 2 total findings • Sherlock • Kirkeelee

#9

medium

V3AMO.sol will not work with some of the protocols it is aimed to integrate with.

medium

The protocol is not compliant with ERC-1504

Sep '24

uniswap-v4

uniswap-v4

330.08 USDC • Cantina • kirkeelee

#53

Aug '24

Cork Protocol

Cork Protocol

99.45 USDC • 1 total finding • Sherlock • Kirkeelee

#12

medium

Wrong accounting in case of using stETH as RA due to 1-2 Wei loss per transfer.

Midas - Instant Minter/Redeemer

Midas - Instant Minter/Redeemer

809.83 USDC • 1 total finding • Sherlock • Kirkeelee

#7

medium

Incorrect pointer set in the ```initialize()``` function leads to broken functionality of RedemptionVaultWithBUIDL.sol

Jul '24

MakerDAO Endgame

MakerDAO Endgame

240.35 USDC • Sherlock • Kirkeelee

#86

Velocimeter

Velocimeter

438.92 USDC • 1 total finding • Sherlock • Kirkeelee

#21

high

The function ```disable_max_lock``` in VotingEscrow.sol doesn't handle the case when the nft being removed is the last item in the array.

May '24

Euler-v2

Euler-v2

694 USDC • Cantina • kirkeelee

#48

Kwenta x Perennial Integration Update

Kwenta x Perennial Integration Update

44.54 USDC • Sherlock • Kirkeelee

#7

LoopFi

LoopFi

386.08 USDC • 1 total finding • Code4rena • Kirkeelee

bronze

high

Availability of deposit invariant can be bypassed

Apr '24

xKeeper

xKeeper

831.96 USDC • 1 total finding • Sherlock • Kirkeelee

silver

medium

OpenRelay.sol does not account for the Layer1 gas fees used in the transaction while calculating the fee to be paid to the relayer.

Feb '24

Tokemak

Tokemak

519 USDC • Hats • 0xker2

#7

Althea Liquid Infrastructure

Althea Liquid Infrastructure

25.73 USDC • 1 total finding • Code4rena • Kirkeelee

#32

medium

Distribution can be bricked, and double claims by a few holders are possible when owner calls `LiquidInfrastructureERC20::setDistributableERC20s`

Jan '24

Ion Protocol

Ion Protocol

86.5 USDC • Hats • 0xker2

#11

SYMM IO

SYMM IO

0.00 USDC • Sherlock • Kirkeelee

#44

Dec '23

Footium Update

Footium Update

0.00 USDC • Sherlock • Kirkeelee

#44

Jul '23

Beam

Beam

0.00 USDC • Sherlock • Kirkeelee

#41

May '23

USSD - Autonomous Secure Dollar

USSD - Autonomous Secure Dollar

0.00 USDC • 1 total finding • Sherlock • Kirkeelee

#91

high

Wrong price feed contract address used in the constructor of the StableOracleWBTC.sol.