coin2own

Security Researcher

Contact Me

High

Total

Medium

Total

$470.00

Total Earnings

#1567 All Time

6x

Payouts

2x

Top 25

6x

Top 50

All

Sherlock

Jul '25

Mellow Flexible Vaults

2.67 USDC • 2 total findings • Sherlock • coin2own

#41

high

Duplicate Signatures Bypass Consensus Threshold

medium

Inverted Transfer Whitelist Logic Allows Unauthorized Transfers and Blocks Authorized Ones

DeBank

89.01 USDC • Sherlock • coin2own

#32

Notional Exponent

64.94 USDC • 1 total finding • Sherlock • coin2own

#40

medium

Division by Zero in `finalizeAndRedeemWithdrawRequest` Permanently Locks Funds for Partial LP Withdrawals

Jun '25

Symbiotic Relay

16.16 USDC • 1 total finding • Sherlock • coin2own

#11

medium

Gas Denial of Service (DoS) in `PersistentSet.values()` and `valuesAt()` Due to Unbounded Iteration Over Historical Elements

DODO Cross-Chain DEX

120.28 USDC • 2 total findings • Sherlock • coin2own

#34

high

Authorization Bypass in claimRefund Allows Theft of All Pending Refunds for Non-EVM Addresses

medium

Incompatible Encoding and Decoding Functions in AccountEncoder Library Lead to Malformed Cross-Chain Messages for Solana

May '25

LEND

177.87 USDC • 5 total findings • Sherlock • coin2own

#20

high

Incorrect maxLiquidationAmount Calculation in Cross-Chain Liquidation Validation Prevents Legitimate Liquidations

high

Incorrect Principal Update in _handleValidBorrowRequest Understates Cross-Chain Debt Obligation on Collateral Chain

high

Stale Collateral Data in Cross-Chain Borrow Validation (_handleBorrowCrossChainRequest) Leads to Risk of Undercollateralized Loans

medium

maxClose Calculation in liquidateBorrowAllowedInternal Uses Stale Principal, Unduly Restricting Liquidation Repayment Amount

medium

Flawed and Redundant Secondary Liquidity Check in borrow Function May Incorrectly Deny Valid Borrows