https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/c4f63190-a8cb-4bf6-9628-d7e8f7df2244.jpg

Soul22

Security Researcher

Try, make mistakes, learn from them, and trust the process. Choose the Hard Way. Rest when needed. Don't panic.

Contact Me

High

8

Total

Medium

5

Total

$1.81K

Total Earnings

#1069 All Time

7x

Payouts

regular

1x

Top 10

regular

2x

Top 25

regular

3x

Top 50

All

Code4rena

Jan '24

Curves

Curves

1.3 USDC • 4 total findings • Code4rena • Soul22

#125

high

Unrestricted claiming of fees due to missing balance updates in `FeeSplitter`

high

Unauthorized Access to setCurves Function

medium

onBalanceChange causes previously unclaimed rewards to be cleared

medium

If a user sets their curve token symbol as the default one plus the next token counter instance it will render the whole default naming functionality obsolete

Dec '23

Ethereum Credit Guild

Ethereum Credit Guild

608.71 USDC • 5 total findings • Code4rena • Soul22

#23

high

The creation of bad debt (`mark-down` of Credit) can force other loans in auction to also create bad debt

high

Anyone can steal all distributed rewards

medium

Replay attack to suddenly offboard the re-onboarded lending term

medium

Anyone can prolong the time for the rewards to get distributed

medium

Malicious borrower can decrease Guild holders reward

Nov '23

Canto Application Specific Dollars and Bonding Curves for 1155s

Canto Application Specific Dollars and Bonding Curves for 1155s

690.37 USDC • 1 total finding • Code4rena • Soul22

#9

high

Owner cannot withdraw all interest due to wrong calculation of accrued interest in WithdrwaCarry

Kelp DAO | rsETH

Kelp DAO | rsETH

2.76 USDC • Code4rena • Soul22

#54

Oct '23

NextGen

NextGen

1.42 USDC • 3 total findings • Code4rena • Soul22

#105

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

high

Attacker can reenter to mint all the collection supply

high

Adversary can block `claimAuction()` due to push-strategy to transfer assets to multiple bidders

Sep '23

Maia DAO - Ulysses

Maia DAO - Ulysses

25.68 USDC • Code4rena • Soul22

#55

Aug '23

Tangible Caviar

Tangible Caviar

484.88 USDC • Code4rena • Soul22

#26