https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/651edcea-f412-421c-947f-c9f1fb5ce0b6.png

al88nsk

Security Researcher

Contact Me

High

Total

Medium

Total

$53.00

Total Earnings

#2078 All Time

8x

Payouts

1x

Top 50

All

Sherlock

Code4rena

CodeHawks

Feb '25

Core Contracts

1.36 usdc • 3 total findings • CodeHawks • al88nsk

#344

high

Multiple Delegation by Double Spending Boosts and Lack of Delegation Tracking in BoostController Contract

high

Incorrect Reward Claim Logic in FeeCollector::claimRewards Causes Denial of Service

low

Missing Pause Functionality in veRAACToken Contract Can Be Abused When Emergency Withdrawal Mechanism Is Activated

Jul '24

TraitForge

0 USDC • 2 total findings • Code4rena • al88nsk

#89

high

Number of entities in generation can surpass the 10k number

medium

Forger Entities can forge more times than intended

Feb '24

AI Arena

13.73 USDC • 2 total findings • Code4rena • al88nsk

#117

high

A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters

high

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`

Jan '24

Decent

0.12 USDC • 1 total finding • Code4rena • al88nsk

#55

high

Anyone can update the address of the Router in the DcntEth contract to any address they would like to set.

Curves

0.18 USDC • 1 total finding • Code4rena • al88nsk

#135

high

Unrestricted claiming of fees due to missing balance updates in `FeeSplitter`

Dec '23

The Standard

0.07 USDC • 1 total finding • CodeHawks • al88nsk

#102

high

Rewards can be drained because of lack of access control

Sep '23

Venus Prime

36.64 USDC • 1 total finding • Code4rena • al88nsk

#33

medium

DoS and gas griefing of calls to Prime.updateScores()

Allo V2

1.03 USDC • 1 total finding • Sherlock • al88nsk

#71

high

QVSimpleStrategy: allocators can allocate unlimited votes to a recipient