https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/d275da95-ecba-4ada-a7c9-bb06f0faee37.jpg

calmapple839

Security Researcher

ex-journo, web2 backend dev, data engineer, code-literate investigative journo + web3 security enthusiast

Contact Me

Medium

3

Total

$429.00

Total Earnings

#1840 All Time

1x

Payouts

All

Sherlock

Apr '26

XRP Ledger - April 2026

XRP Ledger - April 2026

429.02 USDC • 3 total findings • Sherlock • calmapple839

#77

medium

MPT issuer will strand depositor exits across 11 consumer surfaces (Vault, LoanBroker, AMM, Escrow, Check, holder↔holder Payment) by flipping `lsfMPTCanTransfer=OFF` on a live issuance

medium

Issuer will permanently brick holder MPTokens for all holders who used confidential transfers as clearing lsfMPTCanConfidentialAmount orphans encrypted VL fields that trigger invariant failure

medium

Anyone will permanently lock holder confidential MPT balances for any holder as the ElGamal decrypt cap (1,000,000) is ~13 orders of magnitude below the admission cap (2^63-1)