Security Researcher
Exploring Ideas • Hunting In Wild • Freelancing Auditor • Previously Lead Auditor at @0xMacroSecurity
High
Total
Medium
Total
Total Earnings
#209 All Time
Payouts
1st Places
Top 10
Top 25
All
Sherlock
Code4rena
Hats Finance
Jun '23
May '23
high
Incorrect ``staticOracleUniV3`` configuration for ``StableOracleWBGL`` would revert all protocol actions
high
Anybody can call ``mintRebalancer`` or ``burnRebalancer`` and manipulate ``totalSupply``
high
Rebalance swaps executed from USSD contract, could be sandwiched
high
`SellUSSDBuyCollateral` would revert in case of ``collateralval(DAI) * 1e18 / ownval < collateral[DAI].ratios[flutter]`` due to incorrect check
high
PEG could never be restored completely due incorrect derivation for amount to be swapped
medium
Chainlink's `latestRoundData()` can return stale or incorrect result
Nov '22
high
[High-1] Lack of check on unlockTime allows any staker to inflate stakedTimeBonus to any amount
high
[High-2] Total voting power and thereby quorum would be calculated incorrectly due to missing updates for total community voting power in the delegation edge case.
medium
[Medium-1] Hardcoded `monsterMultiplier` in case of `stakedTimeBonus` disregards the updates done to `monsterMultiplier` through `setMonsterMultiplier()`
medium
[Low-1] Due to lock on actions of delegator, if the delegatee has participated in active proposals, the delegatee can stop its delegators from changing their delegation or doing unstake