https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/935c3eb7-5c49-4bd7-b9c7-00bedfbb744f.jpg

copperscrewer

Security Researcher

Contact Me

High

Total

Medium

Total

$11.42K

Total Earnings

#593 All Time

27x

Payouts

1x

2nd Places

3x

Top 10

9x

Top 25

All

Sherlock

Code4rena

Cantina

CodeHawks

Immunefi

Dec '25

Monolith Stablecoin Factory

5.20 USDC • 1 total finding • Sherlock • copperscrewer

#25

medium

Protocol will not accrue interest when time elapsed is more than 30 days

Nov '25

Mento-V3

4,416.09 USDC • 1 total finding • Cantina • c0pp3rscr3w3r

medium

Finding not yet public.

Aug '25

GTE Perps and Launchpad

6.15 USDC • 4 total findings • Code4rena • c0pp3rscr3w3r

#92

high

CREATE2 address of the uniswap pair used by `LaunchPad` does not match address of pair deployed by `GTELaunchpadV2PairFactory`

high

Donations to `Distributor` with arbitrary `quoteToken` can be used to drain all quote rewards from distributor

high

Total reward shares for token can reach zero after unlocking, causing `GTELaunchpadV2Pair` to be bricked

medium

`LaunchToken` transfers cause staking rewards to be lost to the `LaunchPad`

Jul '25

pike-tapio-monrepo

4,699.5 USDC • 2 total findings • Cantina • c0pp3rscr3w3r

high

Finding not yet public.

medium

Finding not yet public.

DeBank

25.14 USDC • Sherlock • copperscrewer

#63

May '25

superform-core

106.65 USDC • 1 total finding • Cantina • c0pp3rscr3w3r

#26

medium

Finding not yet public.

mystic-monorepo

1.03 USDC • 1 total finding • Cantina • c0pp3rscr3w3r

#85

medium

Finding not yet public.

alchemix-v3

295.17 USDC • 3 total findings • Cantina • c0pp3rscr3w3r

#30

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

Mar '25

Symmio, Staking and Vesting

8.90 USDC • 2 total findings • Sherlock • copperscrewer

#16

medium

Incorrect check will DOS adding liquidity for balancer pool from locked SYMM amounts

medium

Rewards distribution duration can be doubled and rate almost halved because of constant reset duration attack

Feb '25

Core Contracts

76.82 usdc • 4 total findings • CodeHawks • copperscrewer

#164

medium

Treasury Contract Deposit Function Can Be Frontrun To Deny Protocol Operations

medium

Fee-on-transfer token handling issue in `Treasury::deposit` leads to permanent fund loss

medium

Multiple Token Management Lets Withdraw a Token Different than Deposited Token

low

Boost calculator does not incorporate time weighted averages in its calculation

Jan '25

Plaza Finance

41.37 USDC • 4 total findings • Sherlock • copperscrewer

#55

high

Minting bond tokens during the Auction will not leave enough coupon tokens for every user to claim

medium

Blacklisted addresses can DOS the auction

medium

Auction can be failed repeatedly reliably by an Attacker by bidding high reserve amount

medium

Auction pool sale limit fails to consider the amount of fees owed

Dec '24

SecondSwap

0.86 USDC • 3 total findings • Code4rena • c0pp3rscr3w3r

#62

high

Users can claim more that their actual allotment

medium

Incorrect referral fee calculations

medium

Listing potential can not be purchased with discounted price

Lambo.win

0.3 USDC • 2 total findings • Code4rena • c0pp3rscr3w3r

#35

high

Minting zero tokens when underlyingToken is not Ether in cashIn()

medium

Since the cost of launching a new pool is minimal, an attacker can maliciously consume VirtualTokens.

Nov '24

Ethos Network Financial Contracts

55.83 USDC • 1 total finding • Sherlock • copperscrewer

#30

medium

User loses more deposit value because of incorrect fee calculation

Debita Finance V3

124.13 USDC • 2 total findings • Sherlock • copperscrewer

#24

medium

Attacker will de-list entries to borrowOrders factory

medium

Attacker will de-list lend offers in LendOfferFactory

Jul '24

Karak Restaking

0 USDC • Code4rena • c0pp3rscr3w3r

#16

May '24

Olas

232.44 USDC • 2 total findings • Code4rena • c0pp3rscr3w3r

#12

high

Bonds created in year cross epoch's can lead to lost payouts

medium

Incorrect Handling of Last Nominee Removal in `removeNominee` Function

Munchables

0.01 USDC • 1 total finding • Code4rena • c0pp3rscr3w3r

#16

high

Invalid validation allows users to unlock early

Apr '24

Audit Comp | Alchemix

228 USDC • 2 total findings • Immunefi • copperscrewer

#41

medium

Finding not yet public.

medium

Finding not yet public.

DYAD

0.02 USDC • 1 total finding • Code4rena • c0pp3rscr3w3r

#114

high

Attacker can make 0 value deposit() calls to deny user from redeeming or withdrawing collateral

Feb '24

AI Arena

7.39 USDC • 2 total findings • Code4rena • c0pp3rscr3w3r

#130

high

A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters

medium

Minter / Staker / Spender roles can never be revoked`..,

Jan '24

Salty.IO

0.78 USDC • 1 total finding • Code4rena • c0pp3rscr3w3r

#117

high

User can evade `liquidation` by depositing the minimum of tokens and gain time to not be liquidated

Curves

0.41 USDC • 2 total findings • Code4rena • c0pp3rscr3w3r

#133

high

Unauthorized Access to setCurves Function

medium

Protocol and referral fee would be permanently stuck in the Curves contract when selling a token

Dec '23

Olas

830.39 USDC • 2 total findings • Code4rena • c0pp3rscr3w3r

high

Bonds created in year cross epoch's can lead to lost payouts

medium

Incorrect Handling of Last Nominee Removal in `removeNominee` Function

Nov '23

Audit Comp | DeGate

250 USDC • 2 total findings • Immunefi • copperscrewer

#30

low

Finding not yet public.

low

Finding not yet public.

Oct '23

NextGen

0 USDC • 1 total finding • Code4rena • c0pp3rscr3w3r

#115

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Sep '23

Maia DAO - Ulysses

11.47 USDC • Code4rena • c0pp3rscr3w3r

#60