https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_0.png

MysteryAuditor

Security Researcher

Contact Me

High

4

Total

Medium

5

Total

$542.00

Total Earnings

#1412 All Time

4x

Payouts

regular

1x

Top 10

regular

3x

Top 25

regular

4x

Top 50

All

Sherlock

Code4rena

Mar '25

Forte: Float128 Solidity Library

Forte: Float128 Solidity Library

458.74 USDC • 1 total finding • Code4rena • MysteryAuditor

#13

high

Early 72-digit adjustment in sqrt will lead to incorrect result exponent calculation

Symmio, Staking and Vesting

Symmio, Staking and Vesting

0.00 USDC • 1 total finding • Sherlock • MysteryAuditor

#18

medium

Attacker can dilute reward mechanism by invoking `notifyRewardAmount()`

Feb '25

THORWallet

THORWallet

0 USDC • 1 total finding • Code4rena • MysteryAuditor

#10

medium

Improper Transfer Restrictions on Non-Bridged Tokens Due to Boolean Bridged Token Tracking, Allowing a DoS Attack Vector

Jan '25

Plaza Finance

Plaza Finance

84.01 USDC • 6 total findings • Sherlock • MysteryAuditor

#38

high

Users can claim coupons without engaging in protocol activities due to the absence of a minimum duration between `create()` and `redeem()`

high

`Pool.transferReserveToAuction()` reverts due to incorrect usage of index for current auction

high

The fee calculation which the protocol claims is incorrect and this could unfair to users

medium

User funds can be lost during `joinBalancerAndPredeposit()` access

medium

The state variable `BondToken.globalPool` is updated incorrectly via `Pool.startAuction()`

medium

The `BondToken.increaseIndexedAssetPeriod()` involves incorrect logic for updating state variable `globalPool`