dimah7

Security Researcher

Contact Me

High

Total

Medium

Total

$2.93K

Total Earnings

#890 All Time

19x

Payouts

1x

2nd Places

3x

Top 10

6x

Top 25

All

Sherlock

Code4rena

Cantina

CodeHawks

Mar '25

Symmio, Staking and Vesting

0.00 USDC • 1 total finding • Sherlock • dimah7

#18

medium

Anyone can add fraction rewards and slow down the reward per token

Feb '25

Usual Labs

128.12 USDC • Sherlock • dimah7

#28

Jan '25

daao-contracts

0.82 USDC • 1 total finding • Cantina • cantinaresearcher19

#119

high

Finding not yet public.

Aave v3.3

86.96 USDC • Sherlock • dimah7

#86

Ignite

15.29 usdc • CodeHawks • dimah7

#21

Dec '24

Autonomint Colored Dollar V1

0.33 OP • 2 total findings • Sherlock • dimah7

#65

high

Core functions can be DoS-ed, which will lead to loss of funds for CDS owners

high

Treasury reserves can be drained

Nov '24

Debita Finance V3

0.47 USDC • 1 total finding • Sherlock • dimah7

#56

medium

A malicious user can DoS the matching of offers

Oct '24

Gamma Brevis Rewarder

314.34 OP • 1 total finding • Sherlock • dimah7

medium

Leftover amounts from rounding in reward distribution will be stuck forever in the `GammaRewarder`

stakeup-bloomv2

9.4 USDC • 1 total finding • Cantina • cantinaresearcher19

#104

medium

Finding not yet public.

Sep '24

Liquid Staking

1,478.57 USDC • 1 total finding • CodeHawks • dimah7

medium

Vault fee receivers can conditionally block rewards distribution flow

Royco Protocol

53.53 USDC • 3 total findings • Cantina • cantinaresearcher19

#56

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Aug '24

Phi

12.56 USDC • 1 total finding • Code4rena • dimah7

#44

medium

Attacker can DOS user from selling shares of a credId

Winnables Raffles

30.04 USDC • 1 total finding • Sherlock • dimah7

#24

medium

Admin can steal funds from ticket sales, and rug raffle participants

Sentiment V2

114.84 USDC • 2 total findings • Sherlock • dimah7

#31

medium

Missing circuit breaker checks for Chainlink price feeds

medium

Super pools can't be paused, in case of an emergency

Tadle

3.44 USDC • 3 total findings • CodeHawks • dimah7

#134

high

TokenManager - Unlimited withdraw

high

Native token withdrawal fails until manually approved

high

Malicious user can drain protocol by bypassing `ASK` offer abortion validation in `Turbo` mode

Jul '24

TraitForge

0.01 USDC • 2 total findings • Code4rena • dimah7

#88

medium

Pause and unpause functions are inaccessible

medium

Discrepancy between nfts minted, price of nft when a generation changes & position of `_incrementGeneration()` inside `_mintInternal()` & `_mintNewEntity()`

May '24

Beanstalk: The Finale

81.46 USDC • 1 total finding • CodeHawks • dimah7

#34

low

Permit functions will not work with certain tokens

Sablier

578.16 USDC • 1 total finding • CodeHawks • dimah7

#10

medium

Use of CREATE method is suspicious of reorg attack

Apr '24

NOYA

23.11 USDC + NOYA stars • 1 total finding • Code4rena • dimah7

#77

high

`executeWithdraw` may be blocked if any of the users are blacklisted from the `baseToken`