Security Researcher
High
Total
Medium
Total Earnings
#781 All Time
Payouts
Top 10
Top 25
Top 50
All
Sherlock
Code4rena
CodeHawks
Jul '24
53.91 USDC • Sherlock • caventa
#108
Jan '24
43.27 USDC • Sherlock • caventa
#21
Nov '23
65.70 USDC • 1 total finding • Sherlock • caventa
#14
medium
Curve token swap will likely to fail because fee and slippage consideration are excluded
Oct '23
804.01 USDC • 2 total findings • Code4rena • caventa
#6
Function WildcatMarketController.setAnnualInterestBips allows for values outside the factory range
When a batch of withdrawals expires, that batch is often underpaid their owed interest
Sep '23
68.93 USDC • 1 total finding • CodeHawks • caventa
#39
low
Combined short record might exceed the maximum collateral ratio (CRATIO_MAX)
Aug '23
41.45 USDC • Code4rena • caventa
#57
38.45 USDC • Code4rena • caventa
#19
Jul '23
40.41 USDC • 2 total findings • CodeHawks • caventa
#52
High - Funds can be lost if any participant is blacklisted
gas
Contract Can Be Deployed Without Funds.
145.39 USDC • 2 total findings • Sherlock • caventa
#13
high
Should not mint new amount when distribute record to the same beneficiary gets replaced if it was not claimed before
Should burn existing minted token for all beneficiaries before changing voteFactor
76.65 USDC • Sherlock • caventa
#43
135.85 USDC • 1 total finding • Sherlock • caventa
Blacklist receiver maybe unable to reclaim option token leads to fund token in the contract
Jun '23
84.36 USDC • 1 total finding • Code4rena • caventa
#59
The relation between the safe collateral ratio and the bad collateral ratio for the PeUSD vaults is not enforced correctly
Apr '23
1,280.75 USDC • 1 total finding • Sherlock • caventa
Internal withdrawal does not check isDepositAllowed
113.83 USDC • 2 total findings • Code4rena • caventa
Incorrect fee handling in Position.sol's Market Buy/Sell functions
RubiconMarket: buy() may not take any fee for tokens with low decimal precision
Feb '23
528.36 USDC • 1 total finding • Sherlock • caventa
#20
There is no market enabled validation in Swap and CreateAdl activities
92.63 USDC • 2 total findings • Sherlock • caventa
#34
[Major logic error] Unable to deposit NFT if total NFT deposited reaches nftDepositLimit and 1 NFT is refunded for all 4 bounty types.
[Major logic error] setPayoutSchedule cannot reduce the number of payout schedules
Jan '23
1,211.97 USDC • Code4rena • caventa
#17
Dec '22
1,015.59 USDC • Code4rena • caventa
#24
45.71 USDC • Code4rena • caventa
90.42 USDC • 1 total finding • Code4rena • caventa
Liquidity providers may lose funds when adding liquidity
28.12 USDC • Code4rena • caventa
#31
Nov '22
45.82 USDC • 1 total finding • Sherlock • caventa
Should only allow order trader or owner to check an order
449.82 USDC • 2 total findings • Sherlock • caventa
The calculation of totalUSDborrowed value is wrong in Vault Synths
Chainlink's latestRoundData might return stale results
Oct '22
0 USDC • Code4rena • caventa
529.57 USDC • 1 total finding • Sherlock • caventa
Asset manager's deposit, withdraw and rebalance function calls will get reverted when one of the adapters is broken or paused
99.78 USDC • 1 total finding • Sherlock • caventa
#9
New shares calculation could be wrong if total supply = amount and total supply is not zero
Sep '22
9.09 USDC • Code4rena • caventa
#79
Jul '22
48.55 USDC • 1 total finding • Code4rena • caventa
#50
Error in allowance logic