axelot

Security Researcher

Contact Me

High

Total

Medium

Total

$1.63K

Total Earnings

#1201 All Time

7x

Payouts

4x

Top 25

6x

Top 50

All

Sherlock

Sep '25

BMX Deli Swap

198.80 USDC • 1 total finding • Sherlock • axelot

#13

high

Retroactive auto-voting for epochs that already ended is possible.

Ammplify

283.33 USDC • 3 total findings • Sherlock • axelot

#26

medium

Maker position creation will be DOSed in some cases for revert on zero tokens.

medium

`NFTManager.tokenURI()` always reverts because `_generateMetadata` reads the wrong storage

medium

A maker reducing liquidity early will freeze JIT penalties in the diamond, affecting protocol revenues

Aug '25

USG - Tangent

7.95 USDC • 2 total findings • Sherlock • axelot

#61

high

Users can supply rogue `controlTower` address to `migrateFrom` and steal from other users

medium

`zappingProxy.zapProxy` is incompatible with `USDT`

Yield Basis

44.80 USDC • 1 total finding • Sherlock • axelot

#11

medium

`InflationaryVest` can be drained

Jul '25

Malda

962.00 USDC • 3 total findings • Sherlock • axelot

#15

high

Rebalancer can divert funds by choosing an arbitrary receiver, escalating its privileges

medium

A decimal mismatch in `MixedPriceOracleV4` makes the oracle always select `eOracle`, breaking the expected functionality and causing DoS when eOracle is stale

medium

Any rebalancer will permanently block rebalancing on a `dstChainId, token` pair causing inability to rebalance for the protocol

Mellow Flexible Vaults

0.04 USDC • 1 total finding • Sherlock • axelot

#43

medium

Transfer whitelist check is inverted for `TokenizedShareManager`, breaking the transfer whitelist functionality

Jan '25

Peapods

130.12 USDC • 1 total finding • Sherlock • axelot

#24

medium

Incorrect address of `V3_POS_MGR` on `Base` would break `V3Locker`