https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/d168bbf6-67cc-47fc-a839-dd0cb3752394.jpg

Stormy

Security Researcher

Stormy + EVM = Wizard

Contact Me

High

3

Total

Medium

7

Total

$52.75K

Total Earnings

#211 All Time

5x

Payouts

gold

2x

1st Places

regular

3x

Top 10

regular

3x

Top 25

All

Code4rena

Immunefi

Aug '25

GTE Perps and Launchpad

GTE Perps and Launchpad

791.38 USDC • 4 total findings • Code4rena • Stormy

#26

high

Risk of Gas DoS due to Looping

high

Total reward shares for token can reach zero after unlocking, causing `GTELaunchpadV2Pair` to be bricked

medium

Duo to logical error when changing leverage the system also refunds the margin that should be backing the unrealized loss the account holds.

medium

Pair pre-creation disables Launchpad rewards hooks leading to no fees accrued or distributed

Apr '24

IOP | Hinkal

IOP | Hinkal

2,500 USDC • Immunefi • Stormy

#5

Feb '24

Audit Comp | eBTC

Audit Comp | eBTC

20,517 USDC • 3 total findings • Immunefi • Stormy

gold

medium

Finding not yet public.

medium

Finding not yet public.

low

Finding not yet public.

Nov '23

Kelp DAO | rsETH

Kelp DAO | rsETH

76.02 USDC • 1 total finding • Code4rena • Stormy

#42

medium

Update in strategy will cause wrong issuance of shares

Oct '23

Badger eBTC Audit + Certora Formal Verification Competition

Badger eBTC Audit + Certora Formal Verification Competition

28,862.18 USDC • 3 total findings • Code4rena • Stormy

gold

high

Stormy - Lost of user funds, as LeverageMacroReferences can't do an arbitrary system call to the function claimsSurplusCollShare in order to claim the extra surplus collateral gained from their liquidated or fully redeemed Cdps.

medium

When calling LeverageMacroBase.doOperation to open a CDP, the POST CALL CHECK may use the wrong cdpId

medium

Batched liquidations doesn't distribute bad debt on next batches in the list