https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/f412102a-1974-4916-91bf-af59054b3834.jpg

TheCarrot

Security Researcher

Contact Me

High

Total

Medium

Total

$228.00

Total Earnings

#1910 All Time

7x

Payouts

1x

Top 25

4x

Top 50

All

Sherlock

Code4rena

Cantina

Immunefi

Oct '25

Reflector V3

0 USDC • 2 total findings • Code4rena • TheCarrot

#16

high

`set_invocation_costs_config()` fails to authorize admin allowing anyone to set invocation costs

medium

`twap()` under-charges for multi-period queries due to hardcoded `periods=1`

Jul '25

Attackathon | Plume Network

62 USDC • 1 total finding • Immunefi • TheCarrot

#89

low

Finding not yet public.

May '25

Audit Comp | Flare | FAssets

78 • 1 total finding • Immunefi • TheCarrot

#45

low

Finding not yet public.

Apr '25

Burve

54.68 USDC • 2 total findings • Sherlock • TheCarrot

#27

high

Incorrect Netting Logic in `commit()`

high

Uninitialized Variable Used in Tax Computation in `removeValueSingle`

mighty-contracts

0.15 USDC • 1 total finding • Cantina • TheCarrot

#100

high

Finding not yet public.

Mar '25

Forte: Float128 Solidity Library

33.88 USDC • 1 total finding • Code4rena • TheCarrot

#26

high

Sqrt function silently reverts the entire control flow when a packed float of 0 value is passed

Feb '25

Virtuals Protocol

0.08 USDC • 1 total finding • Code4rena • TheCarrot

#71

medium

Missing Slippage Protection On Buy And Sell