https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/9fc67f4d-0743-406d-b9d1-2e87b8f99093.jpg

Tri-pathi

Security Researcher

Red Team Member @QuillAudits | Smart Contract Researcher at @code4rena @sherlock @codehawks | Final year @iitroorkee 558f7b08e6

Contact Me

High

4

Total

Medium

4

Total

$1.18K

Total Earnings

#1188 All Time

5x

Payouts

regular

1x

Top 10

regular

2x

Top 25

regular

3x

Top 50

All

Sherlock

Dec '24

Oku's New Order Types Contract Contest

Oku's New Order Types Contract Contest

2.29 OP • 4 total findings • Sherlock • Tri-pathi

#44

high

`createOrder` transfers assets from recipient instead of msg.sender

high

orderId is not unique which will lead to loss of funds for order creator or contract

high

CancelOrder doesn't update the orders mapping which will cause drain of contract funds

medium

DOS from spamming zero order

Jul '24

MagicSea - the native DEX on the IotaEVM

MagicSea - the native DEX on the IotaEVM

0.08 USDC • 1 total finding • Sherlock • Tri-pathi

#64

medium

`MasterChef` isn't compatible with Fee on transfer tokens

May '24

PoolTogether: The Prize Layer for DeFi

PoolTogether: The Prize Layer for DeFi

692.05 USDC • 1 total finding • Sherlock • Tri-pathi

#14

medium

Vault's `maxDeposit()` returns a positive value while `deposit()` reverts violating EIP-4626

Nov '23

Notional Update #4

Notional Update #4

480.99 USDC • 1 total finding • Sherlock • Tri-pathi

#6

high

Invariant should be round down instead of round up

Sep '23

Allo V2

Allo V2

0.09 USDC • 1 total finding • Sherlock • Tri-pathi

#74

medium

Protocol accounts incorrect amount in the distribution strategy for fee on transfer tokens