https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/b1d6a50b-491d-4885-8e7d-68a9566f646e.png

Yashar

whitehat

Contact Me

High

Total

Medium

Total

$11.49K

Total Earnings

#507 All Time

10x

Payouts

1x

3rd Places

2x

Top 10

4x

Top 25

All

Sherlock

Code4rena

Cantina

Jan '25

infrared-contracts

7,604.41 USDC • 3 total findings • Cantina • yashar

#12

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Aug '24

Sentiment V2

155.09 USDC • 2 total findings • Sherlock • Yashar

#26

medium

Attacker can DoS the `SuperPoolFactory`

medium

De-Whitelisted tokens remain usable as collateral due to incomplete asset revocation

Jul '24

LoopFi

3.52 USDC • 3 total findings • Code4rena • yashar

#52

medium

WhenNotPaused modifier in the CDPVault can be bypassed by users

medium

Malicious actor can abuse the minimum shares check in `StakingLPEth` and cause DoS or locked funds for the last user that withdraws

medium

`PendleLPOracle::_fetchAndValidate` uses Chainlink's deprecated `answeredInRound`

MakerDAO Endgame

230.94 USDC • Sherlock • Yashar

#89

MagicSea - the native DEX on the IotaEVM

40.06 USDC • 3 total findings • Sherlock • Yashar

#42

high

The voting mechanism for the periods that have a bribe will be DoSed

medium

Attacker can manipulate the `lockDuration` of other users positions

medium

Attackers can drain the rewards

Jun '24

Andromeda – Validator Staking ADO and Vesting ADO

416.09 USDC • 1 total finding • Sherlock • Yashar

medium

Stakers Funds Will Be Permanently Locked Within the Contract if a Validator is Tombstoned

Mar '24

zkSync Era

565.16 USDC • 1 total finding • Code4rena • yashar

#11

medium

Freezed Chain will never be unfreeze since `StateTransitionManager::unfreezeChain` is calling `freezeDiamond` instead of `unfreezeDiamond`.

Jan '24

reNFT

8.62 USDC • Code4rena • yashar

#63

Oct '23

Open Dollar

2,468.82 USDC • 3 total findings • Code4rena • yashar

medium

Malicious users are able to bypass the Tax payment using making a Fake BasicActions Contract

medium

Updating `SafeManager` address in the `Vault721` will disable NFV minting

medium

`ODSafeManager#allowSAFE()` cannot be executed either by the proxy contract or any other address.

Aug '23

Dopex

0.15 USDC • 1 total finding • Code4rena • yashar

#124

high

The peg stability module can be compromised by forcing lowerDepeg to revert.