NoamYakov

Security Researcher

Contact Me

High

Total

Medium

Total

$10.16K

Total Earnings

#565 All Time

28x

Payouts

1x

2nd Places

1x

Top 10

8x

Top 25

All

Code4rena

CodeHawks

Oct '23

NextGen

2.77 USDC • 2 total findings • Code4rena • NoamYakov

#102

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

high

Adversary can block `claimAuction()` due to push-strategy to transfer assets to multiple bidders

Aug '23

Sparkn

2.32 USDC • 2 total findings • CodeHawks • NoamYakov

#81

low

Owner can incorrectly pull funds from contests not yet expired

low

Lack of checking the existence of the Proxy contract

Jun '23

Stader Labs

1,855.13 USDC • 3 total findings • Code4rena • NoamYakov

#15

medium

Owner in VaultProxy.sol is address(0)

medium

`pause/unpause` functionnalities not implemented in many pausable contracts

medium

Risk of losing admin access if updateAdmin set with same current admin address

Apr '23

Frankencoin

273.34 USDC • Code4rena • NoamYakov

#28

Mar '23

Asymmetry contest

17.67 USDC • 1 total finding • Code4rena • NoamYakov

#105

high

`WstEth` derivative assumes a ~1=1 peg of stETH to ETH

Wenwin contest

4,040.02 USDC • 1 total finding • Code4rena • NoamYakov

medium

Insolvency: The `Lottery` may incorrectly consider a year old jackpot ticket as unclaimed and increase `currentNetProfit` by its prize while it was actually claimed

Jan '23

Popcorn contest

69.82 USDC • Code4rena • NoamYakov

#70

Canto Identity Protocol contest

27.36 CANTO • Code4rena • NoamYakov

#14

Numoen contest

716.42 USDC • Code4rena • NoamYakov

#13

RabbitHole Quest Protocol contest

111.35 USDC • Code4rena • NoamYakov

#39

Drips Protocol contest

131.98 USDC • Code4rena • NoamYakov

#11

Reserve contest

72.44 USDC • Code4rena • NoamYakov

#27

Dec '22

GoGoPool contest

934.62 USDC • Code4rena • NoamYakov

#25

Caviar contest

179.23 USDC • Code4rena • NoamYakov

#30

Aug '22

FIAT DAO veFDT contest

14.95 USDC • Code4rena • NoamYakov

#72

Fraxlend (Frax Finance) contest

21.17 USDC • Code4rena • NoamYakov

#70

Mimo August 2022 contest

134.48 USDC • Code4rena • NoamYakov

#24

Rigor Protocol contest

25.39 USDC • Code4rena • NoamYakov

#69

Jul '22

Axelar Network v2 contest

88 USDC • Code4rena • NoamYakov

#34

Golom contest

129.83 USDC • Code4rena • NoamYakov

#73

Fractional v2 contest

37.47 USDC • Code4rena • NoamYakov

#100

May '22

OpenSea Seaport contest

667.27 USDC • Code4rena • NoamYakov

#34

Aura Finance contest

233.14 USDC • Code4rena • NoamYakov

#41

Apr '22

AbraNFT contest

46.34 MIM • Code4rena • NoamYakov

#51

Backd contest

89.35 USDC • Code4rena • NoamYakov

#40

xTRIBE contest

67.07 USDC • Code4rena • NoamYakov

#38

Feb '22

Redacted Cartel contest

65.42 USDC • 1 total finding • Code4rena • NoamYakov

#30

medium

SafeERC20.sol is imported but not used in the transferBribes() function

Badger Citadel contest

109.25 USDC • Code4rena • NoamYakov

#23