https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/39c017e7-d2bc-4e1f-9333-43719af351bb.jpg

TomJ

Security Researcher

Audits Smart Contract on @code4rena (found 3H/15M) and @sherlockdefi (found 1H/1M) | Web3 Security Enthusiast | Bug Bounty Hunter

High

4

Total

Medium

12

Total

$7.53K

Total Earnings

#641 All Time

48x

Payouts

regular

2x

Top 10

regular

15x

Top 25

regular

35x

Top 50

All

Sherlock

Code4rena

Dec '22

Papr contest

40.94 USDC • Code4rena • TomJ

#27

GoGoPool contest

14.91 USDC • 1 total finding • Code4rena • TomJ

#78

high

Inflation of ggAVAX share price by first depositor

Escher contest

31.16 USDC • Code4rena • TomJ

#57

Nov '22

SIZE contest

35.27 USDC • 2 total findings • Code4rena • TomJ

#36

medium

Attacker may DOS auctions using invalid bid parameters

medium

Incompatibility with fee-on-transfer/inflationary/deflationary/rebasing tokens, on both base tokens and quote tokens, with varying impacts

Debt DAO contest

110.58 USDC • Code4rena • TomJ

#43

Chainlink Staking contest

139.59 USDC • Code4rena • TomJ

#17

Oct '22

zkSync v2 contest

229.76 USDC • Code4rena • TomJ

#9

Inverse Finance contest

0.38 USDC • 1 total finding • Code4rena • TomJ

#50

medium

Chainlink oracle data feed is not sufficiently validated and can return stale `price`

3xcalibur contest

63.01 USDC • Code4rena • TomJ

#28

Trader Joe v2 contest

614.74 USDC • Code4rena • TomJ

#14

The Graph L2 bridge contest

20.79 USDC • Code4rena • TomJ

#16

Blur Exchange contest

114.82 USDC • 1 total finding • Code4rena • TomJ

#20

high

StandardPolicyERC1155.sol returns amount == 1 instead of amount == order.amount

Sep '22

QuickSwap and StellaSwap contest

25.78 USDC • Code4rena • TomJ

#55

Frax Ether Liquid Staking contest

101.1 USDC • 2 total findings • Code4rena • TomJ

#28

medium

Centralization risk: admin have privileges: admin can set address to mint any amount of frxETH, can set any address as validator, and change important state in frxETHMinter and withdraw fund from frcETHMinter

medium

frxETHMinter.depositEther may run out of gas, leading to lost ETH

VTVL contest

794.92 USDC • 2 total findings • Code4rena • TomJ

#9

high

Loss of vested amounts

medium

Vesting Schedule Start and End Time can be Set in The Past

Art Gobblers contest

55.2 USDC • Code4rena • TomJ

#21

Harpie

16.97 USDC • 1 total finding • Sherlock • TomJ

#21

medium

Use safeTransferFrom Instead of transferFrom for ERC721

FEI and TRIBE Redemption contest

33.6 USDC • Code4rena • TomJ

#13

Canto Dex Oracle contest

39.22 CANTO • Code4rena • TomJ

#12

Nouns Builder contest

207.55 USDC • 1 total finding • Code4rena • TomJ

#58

medium

Loss of Veto Power can Lead to 51% Attack

Aug '22

Sentiment

533.47 USDC • 1 total finding • Sherlock • TomJ

#17

high

An early lender can manipulate LToken asset per share price and might be able to steal funds of future lenders

Olympus DAO contest

99.82 USDC • 1 total finding • Code4rena • TomJ

#53

medium

[NAZ-M1] Chainlink's `latestRoundData` Might Return Stale Results

Nouns DAO contest

1,093.74 USDC • 1 total finding • Code4rena • TomJ

#13

medium

Loss of Veto Power can Lead to 51% Attack

FIAT DAO veFDT contest

45.92 USDC • Code4rena • TomJ

#51

Fraxlend (Frax Finance) contest

67.18 USDC • Code4rena • TomJ

#47

Foundation Drop contest

62.56 USDC • Code4rena • TomJ

#44

Mimo August 2022 contest

127.67 USDC • Code4rena • TomJ

#26

Rigor Protocol contest

62.65 USDC • Code4rena • TomJ

#59

Jul '22

Axelar Network v2 contest

92.62 USDC • Code4rena • TomJ

#22

Golom contest

262.44 USDC • Code4rena • TomJ

#43

Yield Witch v2 contest

65.04 USDC • Code4rena • TomJ

#15

Swivel v3 contest

25.77 USDC • Code4rena • TomJ

#62

ENS contest

160.83 USDC • 1 total finding • Code4rena • TomJ

#34

medium

transfer() depends on gas consts

Fractional v2 contest

107.33 USDC • 1 total finding • Code4rena • TomJ

#62

medium

Use of `payable.transfer()` may lock user funds

Juicebox V2 contest

135.07 USDC • Code4rena • TomJ

#38

Jun '22

Putty contest

71.18 USDC • Code4rena • TomJ

#60

Canto v2 contest

207.6 USDC • Code4rena • TomJ

#13

Nibbl contest

46.3 USDC • Code4rena • TomJ

#34

Yieldy contest

87.87 USDC • Code4rena • TomJ

#45

Illuminate contest

164.24 USDC • Code4rena • TomJ

#40

Badger-Vested-Aura contest

31.91 USDC • Code4rena • TomJ

#40

Infinity NFT Marketplace contest

80.2 USDC • Code4rena • TomJ

#60

Canto contest

306.41 USDC • Code4rena • TomJ

#36

Connext Amarok contest

231.05 USDC • Code4rena • TomJ

#35

Notional x Index Coop

138.25 USDC • Code4rena • TomJ

#29

May '22

veToken Finance contest

52.45 USDT • Code4rena • TomJ

#59

Velodrome Finance contest

50.15 USDC • Code4rena • TomJ

#56

OpenSea Seaport contest

434.95 USDC • Code4rena • TomJ

#49