https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_2.png

crimson-rat-reach

Security Researcher

Contact Me

High

1

Solo

3

Total

Medium

4

Total

$9.87K

Total Earnings

#555 All Time

4x

Payouts

gold

1x

1st Places

regular

3x

Top 10

regular

3x

Top 25

All

Sherlock

Code4rena

Aug '23

Chainlink Staking v0.2

Chainlink Staking v0.2

471.82 USDC • Code4rena • CRIMSON-RAT-REACH

#41

Jul '23

Basin

Basin

762.57 USDC • 1 total finding • Code4rena • CRIMSON-RAT-REACH

#9

medium

The constant product invariant can be broken.

Jun '23

Hubble Exchange

Hubble Exchange

1,190.56 USDC • 3 total findings • Sherlock • crimson-rat-reach

#8

medium

[MEDIUM] InsuranceFund#syncDeps - Governance can change vUSD address at any time and deposits can get lost

medium

[MEDIUM] Oracle#getUnderlyingPrice - No stale price checks could lead to price manipulation by the user

medium

[MEDIUM] Oracle#getUnderlyingPrice - ChainLinkAdapterOracle will return the wrong price for asset if underlying aggregator hits minAnswer

RealWagmi

RealWagmi

7,447.79 USDC • 3 total findings • Sherlock • crimson-rat-reach

gold

high

Insufficient lpAmount Validation Could Lead to Stuck Funds During Significant Price Movements.

high

Deposit transactions lose funds to front-running when multiple fee tiers are available

high

[MED] Multipool#getAmountOut has a hardcoded feeTier which can cause the function to revert