https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_7.png

detectiveking

Security Researcher

Contact Me

High

1

Solo

7

Total

Medium

11

Total

$23.28K

Total Earnings

#359 All Time

10x

Payouts

gold

1x

1st Places

silver

1x

2nd Places

bronze

1x

3rd Places

All

Sherlock

Jul '24

MakerDAO Endgame

MakerDAO Endgame

5,693.48 USDC • Sherlock • detectiveking

#22

Mar '24

vVv Vesting & Staking

vVv Vesting & Staking

478.34 USDC • Sherlock • detectiveking

#7

Jan '24

JOJO Exchange Update

JOJO Exchange Update

9,112.05 USDC • 3 total findings • Sherlock • detectiveking

gold

high

FundingRateArbitrage contract can be drained due to rounding error

medium

FundingRateArbitrage suffers same share-inflation issues as ERC4626 vaults

medium

Discrepancy between accrueRate and getTRate in `JUSDBankStorage` leads to issues

SYMM IO

SYMM IO

543.47 USDC • Sherlock • detectiveking

bronze

Dec '23

Footium Update

Footium Update

646.82 USDC • Sherlock • detectiveking

#4

Nov '23

Convergence

Convergence

1,954.57 USDC • 2 total findings • Sherlock • detectiveking

#6

high

Tokens that are both gauge and bribe reward tokens will have rewards calculated incorrectly

medium

No slippage tolerance amount for curve swaps

Oct '23

LooksRare

LooksRare

2,386.94 USDC • 3 total findings • Sherlock • detectiveking

silver

high

`agents[1].agentId` access in `claimGrandPrize` is potentially incorrect and can lead to loss of grand prize

medium

_woundRequestFulfilled is not actually random

medium

Wounded agents are killed without the next phase starting

Real Wagmi #2

Real Wagmi #2

730.87 USDC • 1 total finding • Sherlock • detectiveking

#7

medium

Borrower collateral that they are owed can get stuck in Vault and not sent back to them after calling `repay`

Sep '23

Allo V2

Allo V2

338.90 USDC • 4 total findings • Sherlock • detectiveking

#23

high

Allocator can bypass `maxVoiceCreditsPerAllocator` restriction

high

Malicious recipient can frontrun `reviewRecipients` with a call to `registerRecipient`

medium

_fundPool / BaseStrategy doesn't properly support feeOnTransfer tokens

medium

`_qv_allocate` doesn't properly set `votesCastToRecipient`

Aug '23

Cooler Update

Cooler Update

1,397.30 USDC • 5 total findings • Sherlock • detectiveking

#4

high

Abuse checkDefaulted to drain entire treasury through keeper fees

high

Loan forced to default if Lender creates onRepay callback that reverts

medium

Malicious lender abusing rollLoan to capture collateral through Cooler

medium

Frontrun protection on `rollLoan`

medium

Account for edge case where gOHM is sent to ClearingHouse