https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/025d527e-869a-4549-aa1b-69d09753dd1e.jpg

den_sosnovskyi

Security Researcher

Web3 enthusiast Smart contracts Auditor, dApps Developer

Contact Me

High

3

Total

Medium

5

Total

$3.35K

Total Earnings

#837 All Time

5x

Payouts

silver

1x

2nd Places

regular

3x

Top 10

regular

4x

Top 25

All

Sherlock

May '24

Midas

Midas

656.97 USDC • 1 total finding • Sherlock • den_sosnovskyi

#4

high

`BLACKLISTED_ROLE` role can be renounced by anyone

Apr '24

TITLES Publishing Protocol

TITLES Publishing Protocol

22.95 USDC • 1 total finding • Sherlock • den_sosnovskyi

#39

medium

`TitlesGraph::_setAcknowledged` does not change the edge's acknowledged

Zivoe

Zivoe

901.05 USDC • 2 total findings • Sherlock • den_sosnovskyi

#14

high

In `OCY_Convex_A::claimRewards` rewardContract is used as ERC20, but it is not ECR20 which holds rewards

medium

`OCL_ZVE::pushToLockerMulti` can often revert because allowance often will not be reset to zero because of the depositing slippage

Mar '24

Amphor

Amphor

718.89 USDC • 2 total findings • Sherlock • den_sosnovskyi

#6

high

Wrong receiver in `AsyncSynthVault::_createRedeemRequest`, which makes impossible for a receiver to claim a redeem

medium

`VaultZapper::_transferTokenInAndApprove` check allowance in the wrong owner address, which can lead to revert when depositing via `VaultZapper`

Feb '24

Jala Swap

Jala Swap

1,055.07 USDC • 2 total findings • Sherlock • den_sosnovskyi

silver

medium

`timeElapsed` calculation in `JalaPair::_update` function will overflow in the future and will block `mint`, `burn` and `swap` functions

medium

`JalaMasterRouter::swapExactTokensForETH` swaps token with not correct decimals, which cause to losing tokens by trader