Security Researcher
I help protocol teams ship with confidence — using formal methods, fuzzing, and post-deployment security. https://blltprf.xyz
High
Total
Medium
Total
Total Earnings
#625 All Time
Payouts
1st Places
Top 10
Top 25
All
Sherlock
Code4rena
Jul '25
Collaborative Audit • Sherlock • audithare
Apr '24
Mar '24
Feb '24
high
Malicious user can stake an amount which causes zero curStakeAtRisk on a loss but equal rewardPoints to a fair user on a win
high
A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters
high
Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`
medium
NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)
medium
Burner role can not be revoked