https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_6.png

CodeWasp

Security Researcher

Contact Me

High

7

Total

Medium

1

Solo

8

Total

$10.60K

Total Earnings

#524 All Time

10x

Payouts

gold

1x

1st Places

regular

2x

Top 10

regular

6x

Top 25

All

Sherlock

Code4rena

Jul '24

MakerDAO Endgame

MakerDAO Endgame

1,152.37 USDC • Sherlock • CodeWasp

#53

Apr '24

Renzo

Renzo

18.2 USDC • 1 total finding • Code4rena • CodeWasp

#41

medium

Pending withdrawals prevent safe removal of collateral assets

Teller Finance

Teller Finance

456.64 USDC • 1 total finding • Sherlock • CodeWasp

#12

medium

The cycle payment due may span over approx. 2 cycles and block the borrower from paying

TITLES Publishing Protocol

TITLES Publishing Protocol

328.10 USDC • 4 total findings • Sherlock • CodeWasp

#14

high

`Edition.mintBatch(address[], ...)` has disproportionally low mint fee

medium

`Edition.transferWork` does not update fee routes

medium

`Edition` not EIP-1155 compliant

medium

TitlesGraph does not save acknowledgement

DYAD

DYAD

4.1 USDC • 2 total findings • Code4rena • CodeWasp

#106

high

Design flaw and mismanagement in vault licensing leads to double counting in collateral ratios and positions collateralized entirely with kerosine

high

Users can get their Kerosene stuck until TVL becomes greater than Dyad's supply

Panoptic

Panoptic

32.96 USDC • Code4rena • CodeWasp

#18

Mar '24

PoolTogether

PoolTogether

577.45 USDC • 1 total finding • Code4rena • CodeWasp

#10

medium

Funds locked due to missing transfer check

Feb '24

UniStaker Infrastructure

UniStaker Infrastructure

7,783.56 USDC • Code4rena • CodeWasp

gold
Althea Liquid Infrastructure

Althea Liquid Infrastructure

7.18 USDC • 1 total finding • Code4rena • CodeWasp

#34

high

Holders array can be manipulated by transferring or burning with amount 0, stealing rewards or bricking certain functions

AI Arena

AI Arena

242.1 USDC • 5 total findings • Code4rena • CodeWasp

#23

high

Malicious user can stake an amount which causes zero curStakeAtRisk on a loss but equal rewardPoints to a fair user on a win

high

A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters

high

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`

medium

NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)

medium

Burner role can not be revoked