Security Researcher
High
Total
Medium
Total Earnings
#554 All Time
Payouts
2nd Places
Top 10
Top 25
All
Code4rena
CodeHawks
Oct '23
2.77 USDC • 2 total findings • Code4rena • NoamYakov
#102
high
Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime
Adversary can block `claimAuction()` due to push-strategy to transfer assets to multiple bidders
Aug '23
2.32 USDC • 2 total findings • CodeHawks • NoamYakov
#81
low
Owner can incorrectly pull funds from contests not yet expired
Lack of checking the existence of the Proxy contract
Jun '23
1,855.13 USDC • 3 total findings • Code4rena • NoamYakov
#15
medium
Owner in VaultProxy.sol is address(0)
`pause/unpause` functionnalities not implemented in many pausable contracts
Risk of losing admin access if updateAdmin set with same current admin address
Apr '23
273.34 USDC • Code4rena • NoamYakov
#28
Mar '23
17.67 USDC • 1 total finding • Code4rena • NoamYakov
#105
`WstEth` derivative assumes a ~1=1 peg of stETH to ETH
4,040.02 USDC • 1 total finding • Code4rena • NoamYakov
Insolvency: The `Lottery` may incorrectly consider a year old jackpot ticket as unclaimed and increase `currentNetProfit` by its prize while it was actually claimed
Jan '23
69.82 USDC • Code4rena • NoamYakov
#70
27.36 CANTO • Code4rena • NoamYakov
#14
716.42 USDC • Code4rena • NoamYakov
#13
111.35 USDC • Code4rena • NoamYakov
#39
131.98 USDC • Code4rena • NoamYakov
#11
72.44 USDC • Code4rena • NoamYakov
#27
Dec '22
934.62 USDC • Code4rena • NoamYakov
#25
179.23 USDC • Code4rena • NoamYakov
#30
Aug '22
14.95 USDC • Code4rena • NoamYakov
#72
21.17 USDC • Code4rena • NoamYakov
134.48 USDC • Code4rena • NoamYakov
#24
25.39 USDC • Code4rena • NoamYakov
#69
Jul '22
88 USDC • Code4rena • NoamYakov
#34
129.83 USDC • Code4rena • NoamYakov
#73
37.47 USDC • Code4rena • NoamYakov
#100
May '22
667.27 USDC • Code4rena • NoamYakov
233.14 USDC • Code4rena • NoamYakov
#41
Apr '22
46.34 MIM • Code4rena • NoamYakov
#51
89.35 USDC • Code4rena • NoamYakov
#40
67.07 USDC • Code4rena • NoamYakov
#38
Feb '22
65.42 USDC • 1 total finding • Code4rena • NoamYakov
SafeERC20.sol is imported but not used in the transferBribes() function
109.25 USDC • Code4rena • NoamYakov
#23