https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/4e466da7-1b43-4065-800a-f593d90d96ec.png

bretzel

Smart Contract Security Researcher | Exploring MEV • DeFi • bretzel.blog

Contact Me

High

11

Total

Medium

8

Total

$6.52K

Total Earnings

#672 All Time

4x

Payouts

regular

2x

Top 10

regular

4x

Top 25

regular

4x

Top 50

All

Sherlock

Cantina

Apr '25

Burve

Burve

2,192.63 USDC • 4 total findings • Sherlock • bretzel

#10

high

`ValueFacet::removeValueSingle()` silently disables fees earnings leads to always `addEarnings(vid,0)` for LP

high

`ValueFacet::removeValueSingle()` charges fees twice, draining extra funds from users

high

Underlying vault fee mis-accounting disables `trimBalance()` earnings distribution

high

ERC-4626 tokens are transferred instead of their underlying asset (`ValueFacet` – `addValue*()` / `removeValue*()` / `addSingleForValue()` / `removeSingleForValue()`)

Mar '25

badger-ebtc-bsm

badger-ebtc-bsm

29.7 USDC • 2 total findings • Cantina • bretzel

#23

high

Finding not yet public.

high

Finding not yet public.

Jan '25

Peapods

Peapods

3,862.20 USDC • 4 total findings • Sherlock • bretzel

#5

high

Incorrect LP token price conversion in spTKNMinimalOracle

medium

Unset `props.sender` in `removeLeverage()` causes Flashloan repayment failure

medium

Double extraction of debond Fee in `_calculateBasePerPTkn()` leading to incorrect price base per pTKN

medium

Incorrect price calculation in `getPodPerBasePrice()` when paired asset is a Fraxlend pair or Pod

Plaza Finance

Plaza Finance

431.87 USDC • 9 total findings • Sherlock • bretzel

#21

high

Auction cannot end due to incorrect period handling

high

Discrepancy between spec and code: redemption of levETH

high

Dust tokens stuck in BalancerRouter during joinBalancerPool

high

Erroneous fee calculation in Pool

medium

Asymmetry between `sharesPerToken` in `Pool.sol` and `BondToken.sol` leads to incorrect coupon distribution

medium

Market rate never used due to decimal discrepancy

medium

Precision loss in `getRedeemAmount` calculation

medium

Unhandled failed auction lead to coupon amount discrepancy and claim failures

medium

BondOracleAdapter can fetch price from inefficient Pool on Aerodrome