https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_1.png

anodaram

Security Researcher

Contact Me

High

5

Total

Medium

9

Total

$2.00K

Total Earnings

#1088 All Time

7x

Payouts

regular

2x

Top 10

regular

3x

Top 25

regular

4x

Top 50

All

Code4rena

Apr '23

Frankencoin

Frankencoin

22.67 USDC • 1 total finding • Code4rena • anodaram

#65

medium

function `restructureCapTable()` in Equity.sol not functioning as expected

Caviar Private Pools

Caviar Private Pools

14.01 USDC • 2 total findings • Code4rena • anodaram

#68

medium

`changeFeeQuote` will fail for low decimal ERC20 tokens

medium

Flash loan fee is incorrect in Private Pool contract

Rubicon v2

Rubicon v2

103.24 USDC • 5 total findings • Code4rena • anodaram

#56

high

DOS of market operations with malicious offers

medium

Incorrect fee handling in Position.sol's Market Buy/Sell functions

medium

Potential infinite loop in `_borrowLimit` function

medium

Incorrect calculations can occur when calling `Position._marketBuy` and `Position._marketSell` functions that do not include maker fee in `_fee`

medium

Calling `Position._marketBuy` and `Position._marketSell` functions that calculate `_fee` by dividing by `10000` can cause incorrect calculations

Mar '23

Asymmetry contest

Asymmetry contest

766.2 USDC • 3 total findings • Code4rena • anodaram

#8

high

An attacker can manipulate the preDepositvePrice to steal from other users.

high

Reth `poolPrice` calculation may overflow

medium

Residual ETH unreachable and unuitilized in SafEth.sol

Canto Identity Subprotocols contest

Canto Identity Subprotocols contest

12.03 USDC • Code4rena • anodaram

#29

Neo Tokyo contest

Neo Tokyo contest

154.74 USDC • 1 total finding • Code4rena • anodaram

#18

high

Underflow of `lpPosition.points` during withdrawLP causes huge reward minting

Wenwin contest

Wenwin contest

925.18 USDC • 2 total findings • Code4rena • anodaram

#7

high

`LotteryMath.calculateNewProfit` returns wrong profit when there is no jackpot winner

medium

Unsafe casting from `uint256` to `uint16` could cause ticket prizes to become much smaller than intended