cu5t0mPe0

Security Researcher

In the time I'm more energy on `solidity`.Now I will more energy on `rust&golang`. My target is join top level audit firm contact:cu5t0mpeo@gmail.com

Contact Me

High

Total

Medium

Solo

Total

$26.59K

Total Earnings

#341 All Time

21x

Payouts

1x

2nd Places

2x

3rd Places

7x

Top 10

All

Sherlock

Sep '25

Summer.fi - governance v2

76.81 USDC • 2 total findings • Sherlock • cu5t0mPe0

medium

Precision loss reduces rewards

medium

Rewards may be stolen

Dango DEX

1,041.29 USDC • 2 total findings • Sherlock • cu5t0mPe0

#13

medium

`withdraw_liquidity()` has no slippage limit

medium

Protocol fee bypass possible

Jul '25

DeBank

19.37 USDC • Sherlock • cu5t0mPe0

#67

Feb '25

Usual Labs

98.06 USDC • Sherlock • cu5t0mPe0

#30

SEDA Protocol

132.95 USDC • 1 total finding • Sherlock • cu5t0mPe0

#18

high

Attacker will stael user asset

Jan '25

Peapods

114.46 USDC • 2 total findings • Sherlock • cu5t0mPe0

#25

medium

User rewards will be lost

medium

The calculated result of _totalAssets will be smaller than expected

Jul '24

MakerDAO Endgame

2,042.30 USDC • Sherlock • cu5t0mPe0

#42

Velocimeter

291.05 USDC • 3 total findings • Sherlock • cu5t0mPe0

#29

high

The rewards will be stuck in the Voter contract and cannot be claimed

high

The user's funds will be permanently locked and unclaimable

high

When calling `exercise*`, it is vulnerable to a sandwich attack

Jun '24

Orderly Network

7,885.45 USDC • Sherlock • cu5t0mPe0

Findings not publicly available for private contests.

Andromeda – Validator Staking ADO and Vesting ADO

2,234.57 USDC • 2 total findings • Sherlock • cu5t0mPe0

medium

the DEFAULTVALIDATOR cannot be changed

medium

execute_create_batch will not work properly

May '24

PoolTogether: The Prize Layer for DeFi

467.13 USDC • 1 total finding • Sherlock • cu5t0mPe0

#15

medium

The claimer's fee will be stolen by the winner

Arrakis Valantis SOT Audit

10,316.00 USDC • 4 total findings • Sherlock • cu5t0mPe0

high

The way ArrakisPublicVaultRouter and ValantisHOTModulePublic calculate the deposit amount is inconsistent.

high

setModule is not compatible with ValantisHOTModulePublic.

high

The executor takes away all the funds during `setModule`

medium

USDT is not supported

Apr '24

TITLES Publishing Protocol

35.68 USDC • 5 total findings • Sherlock • cu5t0mPe0

#31

high

Collection referrer will lose due fees

high

Users only need to pay a small amount to mint many tokens

medium

The _refundExcess function cannot refund

medium

MintBatch function not working

medium

The creator may not receive the deserved fee.

Mar '24

RadicalxChange

1.18 USDC • 1 total finding • Sherlock • cu5t0mPe0

high

Users may not be able to claim their own amounts

Axis Finance

594.30 USDC • 3 total findings • Sherlock • cu5t0mPe0

#14

high

user can't refund After cancel Auction

high

routing uninitialized vulnerability

medium

After the auction ends, the user cannot receive the amount

Feb '24

Rio Network

5.57 USDC • 1 total finding • Sherlock • cu5t0mPe0

#31

high

When the deposit pool has insufficient deposits, currentEpochsByAsset[asset] is not updated

Jan '24

Arcadia

36.24 USDC • 1 total finding • Sherlock • cu5t0mPe0

medium

Users will lose their reward tokens

Avail

107.06 USDC • Sherlock • cu5t0mPe0

#16

Dec '23

Olympus RBS 2.0

32.55 USDC • 1 total finding • Sherlock • cu5t0mPe0

#17

medium

`BalancerPoolTokenPrice.sol` wrongly assumes that all of the weighted pools uses `totalSupply`

Nov '23

Nouns Builder

1,056.63 USDC • 1 total finding • Sherlock • cu5t0mPe0

high

Auction was DDosed due to calculation accuracy issues

Sep '23

Allo V2

1.03 USDC • 1 total finding • Sherlock • cu5t0mPe0

#71

high

Any allocator can call allocate infinitely