https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/526c93d4-0b6d-4016-8a2e-413ddf1bc844.jpg

Kirkeelee

Security Researcher

Web3 security researcher.

Contact Me

High

Total

Medium

Total

$19.06K

Total Earnings

#368 All Time

26x

Payouts

1x

1st Places

1x

2nd Places

3x

3rd Places

All

Sherlock

Code4rena

Cantina

CodeHawks

Hats Finance

Apr '25

Seamless Protocol - Leverage Tokens

Collaborative Audit • Sherlock • Kirkeelee

Feb '25

Rova

0.04 USDC • 1 total finding • Sherlock • Kirkeelee

medium

`maxTokenAmountPerUser` limit can be bypassed when currency token has less decimals than the launch token.

Liquidity Management

1,324.65 usdc • 2 total findings • CodeHawks • kirkeelee

medium

PerpetualVault can be completely bricked

medium

ADL can result in unwrapped ETH as output which is not handled

Jan '25

Part 2

81.92 usdc • 2 total findings • CodeHawks • kirkeelee

#48

high

Vaults weth reward is not distributed correctly

high

Unclaimed Rewards Loss Due to Missing Validation in `VaultRouterBranch.stake()`

Plaza Finance

5.50 USDC • 2 total findings • Sherlock • Kirkeelee

#82

high

Large redeems before fee claims reduce collectible fees

medium

BalancerRouter.sol does not return excess user funds at certain conditions.

FlatMoney v2 Update

325.31 USDC • Sherlock • Kirkeelee

#10

Findings not publicly available for private contests.

Dec '24

Autonomint Colored Dollar V1

0.18 OP • 1 total finding • Sherlock • Kirkeelee

#66

high

Anyone can steal USDT from the protocol using the redeemUSDT function.

Nov '24

Chiliz Chain System Contracts

195.98 USDC • Sherlock • Kirkeelee

#13

Findings not publicly available for private contests.

Oct '24

Covalent - EWM Light Client

453.76 USDC • Sherlock • Kirkeelee

Findings not publicly available for private contests.

Index x Morpho Leverage Integration

12,000 USDC • 1 total finding • Sherlock • Kirkeelee

medium

_calculateMaxBorrowCollateral function will revert in extreme market conditions leading to liquidations.

AXION

162.74 USDC • 2 total findings • Sherlock • Kirkeelee

medium

V3AMO.sol will not work with some of the protocols it is aimed to integrate with.

medium

The protocol is not compliant with ERC-1504

Sep '24

uniswap-v4

330.08 USDC • Cantina • kirkeelee

#49

Aug '24

Cork Protocol

99.45 USDC • 1 total finding • Sherlock • Kirkeelee

#12

medium

Wrong accounting in case of using stETH as RA due to 1-2 Wei loss per transfer.

Midas - Instant Minter/Redeemer

809.83 USDC • 1 total finding • Sherlock • Kirkeelee

medium

Incorrect pointer set in the ```initialize()``` function leads to broken functionality of RedemptionVaultWithBUIDL.sol

Jul '24

MakerDAO Endgame

240.35 USDC • Sherlock • Kirkeelee

#86

Velocimeter

438.92 USDC • 1 total finding • Sherlock • Kirkeelee

#21

high

The function ```disable_max_lock``` in VotingEscrow.sol doesn't handle the case when the nft being removed is the last item in the array.

May '24

Euler-v2

694 USDC • Cantina • kirkeelee

#44

Kwenta x Perennial Integration Update

44.54 USDC • Sherlock • Kirkeelee

LoopFi

386.08 USDC • 1 total finding • Code4rena • Kirkeelee

high

Availability of deposit invariant can be bypassed

Apr '24

xKeeper

831.96 USDC • 1 total finding • Sherlock • Kirkeelee

medium

OpenRelay.sol does not account for the Layer1 gas fees used in the transaction while calculating the fee to be paid to the relayer.

Feb '24

Tokemak

519 USDC • Hats • 0xker2

Althea Liquid Infrastructure

25.73 USDC • 1 total finding • Code4rena • Kirkeelee

#32

medium

Distribution can be bricked, and double claims by a few holders are possible when owner calls `LiquidInfrastructureERC20::setDistributableERC20s`

Jan '24

Ion Protocol

86.5 USDC • Hats • 0xker2

#11

SYMM IO

0.00 USDC • Sherlock • Kirkeelee

#44

Dec '23

Footium Update

0.00 USDC • Sherlock • Kirkeelee

#44

Jul '23

Beam

0.00 USDC • Sherlock • Kirkeelee

#41

May '23

USSD - Autonomous Secure Dollar

0.00 USDC • 1 total finding • Sherlock • Kirkeelee

#91

high

Wrong price feed contract address used in the constructor of the StableOracleWBTC.sol.