https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_3.png

camden

Security Researcher

Contact Me

High

5

Total

Medium

8

Total

$10.56K

Total Earnings

#560 All Time

6x

Payouts

silver

1x

2nd Places

regular

4x

Top 10

regular

5x

Top 25

All

Code4rena

May '22

Rubicon contest

Rubicon contest

162.75 USDC • 2 total findings • Code4rena • camden

#42

medium

Cannot deposit to BathToken if token is Deflationary Token (BathHouse.sol)

medium

Use `safeTransfer()`/`safeTransferFrom()` instead of `transfer()`/`transferFrom()`

Jan '22

Notional contest

Notional contest

0 USDC • Code4rena • camden

#23

Behodler contest

Behodler contest

2,161.83 USDC • 3 total findings • Code4rena • camden

#9

medium

Calling `generateFLNQuote` twice in every block prevents any migration

medium

You can grief migrations by sending SCX to the UniswapHelper

medium

You can flip governance decisions without extending vote duration

ElasticSwap contest

ElasticSwap contest

845 USDC • 1 total finding • Code4rena • camden

#6

medium

[WP-H1] The value of LP token can be manipulated by the first minister, which allows the attacker to dilute future liquidity providers' shares

InsureDAO contest

InsureDAO contest

2,117.44 tokens) • 2 total findings • Code4rena • camden

#9

high

backdoor in `withdrawRedundant`

medium

Owner can call `applyCover` multiple times in `PoolTemplate.sol`

Sandclock contest

Sandclock contest

5,270.1 USDC • 5 total findings • Code4rena • camden

silver

high

deposit() function is open to reentrancy attacks

high

Withdrawers can get more value returned than expected with reentrant call

high

sponsor() function in open to reentrancy attacks

high

Vaults with non-UST underlying asset vulnerable to flash loan attack on curve pool

medium

no use of safeMint() as safe guard for users