https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/26161f23-1707-41a9-b010-cc512d7b9863.jpg

SarveshLimaye

Security Researcher

Prev Smart Contract Dev @eddy_protocol 💻 | 15 x Hackathon Winner 🏆 | Open Source Contributor | Full Stack Developer | Github - https://t.co/AnYrjI1zb8

Contact Me

High

8

Total

Medium

14

Total

$2.87K

Total Earnings

#1079 All Time

22x

Payouts

bronze

1x

3rd Places

regular

2x

Top 10

regular

10x

Top 25

All

Sherlock

Code4rena

Cantina

Jan '26

OpenCover Insured Vaults

OpenCover Insured Vaults

36.64 USDC • Sherlock • SarveshLimaye

#47

Hotstuff

Hotstuff

48.42 USDC • Sherlock • SarveshLimaye

#33

Findings not publicly available for private contests.

Flying Tulip

Flying Tulip

191.26 USDC • Sherlock • SarveshLimaye

#69

Dec '25

Panoptic: Next Core

Panoptic: Next Core

0 USDC • 1 total finding • Code4rena • SarveshLimaye

#33

high

BuilderWallet `init()` is unprotected/re-initializable, enabling takeover and theft of builder fees

Nov '25

SukukFi

SukukFi

0 USDC • 1 total finding • Code4rena • SarveshLimaye

#20

medium

Finding not yet public.

Megapot

Megapot

0.13 USDC • 1 total finding • Code4rena • SarveshLimaye

#25

medium

Incorrect ticket price reference in JackpotBridgeManager causes user overpayment after price updates

Oct '25

3Jane

3Jane

223.55 USDC • Sherlock • SarveshLimaye

#15

Findings not publicly available for private contests.

Sep '25

Super DCA Liquidity Network

Super DCA Liquidity Network

30.10 OP • 1 total finding • Sherlock • SarveshLimaye

#35

medium

Incorrect cashback calucation on BNB Chain in `SuperDCACashback` Due to Hardcoded USDC Precision

Summer.fi - governance v2

Summer.fi - governance v2

9.82 USDC • 1 total finding • Sherlock • SarveshLimaye

#8

medium

USDC/USDT and WBTC rewards will not accure due to precision loss in `rewardPerToken` calculation

Rezerve Money

Rezerve Money

13.70 USDC • Sherlock • SarveshLimaye

#83

Findings not publicly available for private contests.

Ammplify

Ammplify

264.98 USDC • 1 total finding • Sherlock • SarveshLimaye

#28

high

Position lp fees can lost while during `decomposeAndMint`

Jul '25

pike-tapio-monrepo

pike-tapio-monrepo

130.34 USDC • 2 total findings • Cantina • SarveshLimaye

#18

medium

Finding not yet public.

medium

Finding not yet public.

DeBank

DeBank

102.83 USDC • Sherlock • SarveshLimaye

#28

Jun '25

DODO Cross-Chain DEX

DODO Cross-Chain DEX

459.13 USDC • 2 total findings • Sherlock • SarveshLimaye

#19

medium

Bridging native token(zeta token) from zetachain using `withdrawToNativeChain` will always revert

medium

Protocol fee can be lost when user user bridges zeta token(native token) from Zetachain to any supported chains

May '25

LEND

LEND

46.77 USDC • 3 total findings • Sherlock • SarveshLimaye

#44

high

Protocol fee can be stucked

high

Incorrect Borrow Balance Update on Cross-Chain Repayment May Lead to Protocol Insolvency

high

Liquidator can claim collateral tokens without repaying borrowers loan

jigsaw-contracts

jigsaw-contracts

1,114.59 USDC • 3 total findings • Cantina • SarveshLimaye

#13

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

SXT

SXT

98.24 USDC • 1 total finding • Cantina • SarveshLimaye

#30

medium

Finding not yet public.

Apr '25

mezo-monorepo

mezo-monorepo

42.39 USDC • 2 total findings • Cantina • SarveshLimaye

#42

medium

Finding not yet public.

medium

Finding not yet public.

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

10.05 USDC • Sherlock • SarveshLimaye

#49

Symmio, Staking and Vesting

Symmio, Staking and Vesting

0.00 USDC • 1 total finding • Sherlock • SarveshLimaye

#18

medium

Reward manipulation in `SymmStaking` due to insufficient authentication in notifyRewardAmount

Feb '25

Yieldoor

Yieldoor

48.11 USDC • 1 total finding • Sherlock • SarveshLimaye

#16

high

`feeRecipient`is not initialized in `Leverager` contract

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • SarveshLimaye

bronze

medium

Incorrect token amount checks in `updateParticipation` function