https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/9b00a81b-d8cc-4561-9cad-f60ccf2d3cf2.jpg

dacian

Security Researcher

deep diving smart contract security

Contact Me

High

Total

Medium

Total

$2.26K

Total Earnings

#958 All Time

9x

Payouts

2x

Top 25

6x

Top 50

All

Sherlock

Code4rena

Aug '23

Tangible Caviar

215.88 USDC • Code4rena • dacian

#39

Jul '23

Moonwell

104.41 USDC • 1 total finding • Code4rena • dacian

#32

medium

missing check for the max/min price in the `chainlinkOracle.sol` contract

PoolTogether

142.55 USDC • 1 total finding • Code4rena • dacian

#51

high

`Vault.mintYieldFee` FUNCTION CAN BE CALLED BY ANYONE TO MINT `Vault Shares` TO ANY RECIPIENT ADDRESS

Jun '23

Lybra Finance

281.19 USDC • 1 total finding • Code4rena • dacian

#36

high

EUSD.mint function wrong assumption of cases when calculated sharesAmount = 0

May '23

USSD - Autonomous Secure Dollar

0.00 USDC • 4 total findings • Sherlock • dacian

#94

high

USSDRebalancer.rebalance() calls USSD.UniV3SwapInput() exposed to unlimited slippage

high

No valid WETH address provided in StableOracleDAI constructor

high

Missing Access Control - anyone can call USSD.mintRebalancer() & burnRebalancer() to mint/burn an arbitrary amount of tokens

medium

Calls to Oracles don't check for stale prices

Venus Protocol Isolated Pools

1,008.22 USDC • 1 total finding • Code4rena • dacian

#15

medium

Borrow rate calculation can cause VToken.accrueInterest() to revert, DoSing all major functionality

Footium

0.01 USDC • 1 total finding • Sherlock • dacian

#32

medium

Use safeTransfer() instead of transfer() for ERC20 tokens

Apr '23

Teller

503.40 USDC • 2 total findings • Sherlock • dacian

#19

medium

Teller breaks when using Fee-On-Transfer ERC20 tokens

medium

Lender can take borrower's collateral before first payment due

Rubicon v2

0.51 USDC • 2 total findings • Code4rena • dacian

#120

medium

Calling `Position._marketBuy` and `Position._marketSell` functions that calculate `_fee` by dividing by `10000` can cause incorrect calculations

medium

Calling `ExpiringMarket.stop` and `ExpiringMarket.isClosed` functions cannot pause any functionlities of the market