https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/02e4213e-5326-46cf-992d-8a26b42c3c55.jpg

Praise03

Security Researcher

On my way to becoming cracked...

Contact Me

High

13

Total

Medium

6

Total

$1.08K

Total Earnings

#1212 All Time

16x

Payouts

silver

1x

2nd Places

bronze

1x

3rd Places

regular

2x

Top 10

All

Sherlock

Code4rena

Cantina

CodeHawks

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

51.60 USDC • Sherlock • Praise03

#24

Crestal Network

Crestal Network

0.01 USDC • 1 total finding • Sherlock • Praise03

#12

high

Any token a user approves to the Blueprint contract can be stolen using the payWithERC20 function

Feb '25

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • Praise03

bronze

medium

currencyAmount is wrongly used to track and update tokenAmount in UpdateParticipation

Dec '24

Oku's New Order Types Contract Contest

Oku's New Order Types Contract Contest

0.00 OP • 1 total finding • Sherlock • Praise03

#66

high

generateOrderId's current implementation can lead to duplicated OrderIDs

Oct '24

Dria

Dria

34.47 USDC • 1 total finding • CodeHawks • praise03

#36

low

Consensus Mechanism Allows Participation Of Voters With Insufficent Stake

Gamma Brevis Rewarder

Gamma Brevis Rewarder

314.34 OP • 1 total finding • Sherlock • Praise03

silver

medium

Some reward Tokens will get stuck in the contract due to amountPerEpoch division remainder not being accounted for

mev-commit

mev-commit

13.67 USDC • 1 total finding • Cantina • praise23

#39

high

Finding not yet public.

Aug '24

Chakra

Chakra

0 USDT • Code4rena • King_

#68

Tadle

Tadle

0.09 USDC • 5 total findings • CodeHawks • praise03

#149

high

Incorrect set up and logic of `referralInfoMap` in `SystemConfig::updateReferrerInfo` function

high

TokenManager - Unlimited withdraw

high

Native token withdrawal fails until manually approved

medium

Unnecessary balance checks and precision issues in TokenManager::_transfer

low

[Low-01] Missing Access Control in `CapitalPool::approve()` Function Allows any User to call it to set Allowance Amount `TokenContract` to `type(uint256).max`.

Jul '24

ArkProject: NFT Bridge

ArkProject: NFT Bridge

46.72 USDC • 1 total finding • CodeHawks • praise03

#41

low

_disableInitializers is missing in Bridge’s constructor

TraitForge

TraitForge

72.89 USDC • 4 total findings • Code4rena • King_

#48

high

`mintToken()`, `mintWithBudget()`, and `forge()` in the `TraitForgeNft` Contract Will Fail Due to a Wrong Modifier Used in `EntropyGenerator.initializeAlphaIndices()`

high

Griefing attack on seller's airdrop benefits

medium

Pause and unpause functions are inaccessible

medium

Discrepancy between nfts minted, price of nft when a generation changes & position of `_incrementGeneration()` inside `_mintInternal()` & `_mintNewEntity()`

Munchables

Munchables

29.18 USDC • 2 total findings • Code4rena • King_

#44

high

Malicious User can call `lockOnBehalf` repeatedly extend a users `unlockTime`, removing their ability to withdraw previously locked tokens

high

[H-01] Miscalculation in `_farmPlots` function could lead to a user unable to unstake all NFTs

May '24

Munchables

Munchables

0.01 USDC • 2 total findings • Code4rena • King_

#16

high

Malicious User can call `lockOnBehalf` repeatedly extend a users `unlockTime`, removing their ability to withdraw previously locked tokens

high

[H-01] Miscalculation in `_farmPlots` function could lead to a user unable to unstake all NFTs

Jan '24

MorpheusAI

MorpheusAI

2.82 USDC • 1 total finding • CodeHawks • praise03

#27

low

Any User can mint any amount of WStETH in the WStETHMock.sol and StETHMock.sol

Dec '23

Revolution Protocol

Revolution Protocol

509.45 USDC • 2 total findings • Code4rena • King_

#16

high

`ArtPiece.totalVotesSupply` and `ArtPiece.quorumVotes` are incorrectly calculated due to inclusion of the inaccessible voting powers of the NFT that is being auctioned at the moment when an art piece is created

medium

CultureIndex.sol#dropTopVotedPiece() - Malicious user can manipulate topVotedPiece to DoS the whole CultureIndex and AuctionHouse

Nov '23

Kelp DAO | rsETH

Kelp DAO | rsETH

2.76 USDC • Code4rena • King_

#54