https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/d2f5569c-0a39-4687-8b19-fe7315b50462.jpg

alymurtazamemon

Security Researcher

Smart Contracts Security Researcher @code4rena @CodeHawks & @Sherlock Software Engineer

Contact Me

High

4

Total

Medium

5

Total

$816.00

Total Earnings

#1362 All Time

7x

Payouts

regular

2x

Top 25

regular

5x

Top 50

All

Sherlock

Code4rena

CodeHawks

Sep '23

Allo V2

Allo V2

36.90 USDC • 1 total finding • Sherlock • alymurtazamemon

#53

medium

Incompatibility with deflationary / fee-on-transfer tokens

Aug '23

Sparkn

Sparkn

1.38 USDC • 3 total findings • CodeHawks • alymurtazamemon

#83

low

If a winner is blacklisted on any of the tokens they can't receive their funds

low

Lack of checking the existence of the Proxy contract

low

Centralization Risk for trusted organizers

Jul '23

Beedle - Oracle free perpetual lending

Beedle - Oracle free perpetual lending

94.57 USDC • 16 total findings • CodeHawks • alymurtazamemon

#45

high

Sandwich attack to steal all ERC-20 tokens in the Fees contract

high

Fee on transfer tokens will cause users to lose funds

high

`Lender` does not handle correctly rebasing, inflationary, deflationary tokens and tokens with fee on transfer

low

Zero address leads to transaction reverts

gas

Multiple accesses of a mapping/array should use a local variable cache.

gas

Modifier gas optimization for onlyOwner modifier

gas

NatSpec documentation for function is missing

gas

Floating pragma in all contracts

gas

Conformance to Solidity naming conventions

gas

Multiple `address` mappings can be combined into a single mapping of an `address` to a `struct`, where appropriate

gas

[G-01] - Do not add the data which is alreday included in the tx to save users gas cost.

gas

Incorrect Event Emmiting

gas

Function ordering does not follow the Solidity style guide

gas

Custom Errors naming

gas

[I-02] - Unnecessary Inheritance.

gas

Use named imports instead of plain `import file.sol

Foundry DeFi Stablecoin CodeHawks Audit Contest

Foundry DeFi Stablecoin CodeHawks Audit Contest

76.09 USDC • 10 total findings • CodeHawks • alymurtazamemon

#22

high

Liquidation Is Prevented Due To Strict Implementation of Liqudation Bonus

medium

DSC protocol can consume stale price data or cannot operate on some EVM chains

medium

Chainlink oracle will return the wrong price if the aggregator hits `minAnswer`

medium

All of the USD pair price feeds doesn't have 8 decimals

medium

Too many DSC tokens can get minted for fee-on-transfer tokens.

low

Zero address check for tokens

low

Pragma isn't specified correctly which can lead to nonfunction/damaged contract when deployed on Arbitrum

low

Precision loss when calculating the health factor

gas

[G-01] - Use `do-while` loop instead of `for-loop` to save users gas cost.

gas

Prefer array assignment over pushing elements in for-loops

CodeHawks Escrow Contract - Competition Details

CodeHawks Escrow Contract - Competition Details

94.79 USDC • 1 total finding • CodeHawks • alymurtazamemon

#38

gas

[I-01] - Use `Natspec` comments for smart contracts, interfaces and libraries.

Amphora Protocol

Amphora Protocol

124.48 USDC • Code4rena • alymurtazamemon

#16

PoolTogether

PoolTogether

387.78 USDC • Code4rena • alymurtazamemon

#35