https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/4e466da7-1b43-4065-800a-f593d90d96ec.png

bretzel

Smart Contract Security Researcher | Exploring MEV • DeFi • bretzel.blog

Contact Me

High

12

Total

Medium

13

Total

$7.13K

Total Earnings

#704 All Time

5x

Payouts

regular

3x

Top 10

regular

5x

Top 25

regular

5x

Top 50

All

Sherlock

Cantina

Jul '25

Notional Exponent

Notional Exponent

617.58 USDC • 6 total findings • Sherlock • bretzel

#10

high

Immutable booster and reward pool addresses in CurveConvex2Token prevent proper migration

medium

MorphoLendingRouter position migration may fail due to rounding mismatch when repaying debt

medium

Revert on non single-sided redemptions for WETH strategies with ETH in Curve pools

medium

Tokens such as USDT will be unusable

medium

Redeem zero token in EthenaCooldownHolder when cooldown duration is zero before initiating a withdraw

medium

CurveConvex2Token lacks implementation for direct Curve gauge staking preventing reward claims

Apr '25

Burve

Burve

2,192.63 USDC • 4 total findings • Sherlock • bretzel

#10

high

`ValueFacet::removeValueSingle()` silently disables fees earnings leads to always `addEarnings(vid,0)` for LP

high

`ValueFacet::removeValueSingle()` charges fees twice, draining extra funds from users

high

Underlying vault fee mis-accounting disables `trimBalance()` earnings distribution

high

ERC-4626 tokens are transferred instead of their underlying asset (`ValueFacet` – `addValue*()` / `removeValue*()` / `addSingleForValue()` / `removeSingleForValue()`)

Mar '25

badger-ebtc-bsm

badger-ebtc-bsm

29.7 USDC • 2 total findings • Cantina • bretzel

#23

high

Finding not yet public.

high

Finding not yet public.

Jan '25

Peapods

Peapods

3,862.20 USDC • 4 total findings • Sherlock • bretzel

#5

high

Incorrect LP token price conversion in spTKNMinimalOracle

medium

Unset `props.sender` in `removeLeverage()` causes Flashloan repayment failure

medium

Double extraction of debond Fee in `_calculateBasePerPTkn()` leading to incorrect price base per pTKN

medium

Incorrect price calculation in `getPodPerBasePrice()` when paired asset is a Fraxlend pair or Pod

Plaza Finance

Plaza Finance

431.87 USDC • 9 total findings • Sherlock • bretzel

#21

high

Auction cannot end due to incorrect period handling

high

Discrepancy between spec and code: redemption of levETH

high

Dust tokens stuck in BalancerRouter during joinBalancerPool

high

Erroneous fee calculation in Pool

medium

Asymmetry between `sharesPerToken` in `Pool.sol` and `BondToken.sol` leads to incorrect coupon distribution

medium

Market rate never used due to decimal discrepancy

medium

Precision loss in `getRedeemAmount` calculation

medium

Unhandled failed auction lead to coupon amount discrepancy and claim failures

medium

BondOracleAdapter can fetch price from inefficient Pool on Aerodrome