https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/55feba4a-ed99-4488-b544-193d8ffc70bb.jpeg

dod4ufn

Security Researcher

Digital sleuth 🔍 | Rust & Solidity Auditor | Safeguarding the blockchain, one bug at a time.

Contact Me

High

4

Solo

11

Total

Medium

4

Solo

8

Total

$22.74K

Total Earnings

#370 All Time

14x

Payouts

gold

1x

1st Places

silver

3x

2nd Places

bronze

1x

3rd Places

All

Sherlock

Code4rena

Hats Finance

Jun '25

dTRINITY

dTRINITY

10,300 USDC • 3 total findings • Hats • dod4ufn

silver

high

Division-by-Zero on First Withdraw in DLoopCoreBase

high

Invariant Violation Due to Unchecked Deallocation from Inactive or Unallocated AMO Vaults

medium

Old AmoManager retains token allowance after replacement in `setAmoManager`

Feb '25

SEDA Protocol

SEDA Protocol

661.52 USDC • 3 total findings • Sherlock • dod4ufn

#10

high

The verifyBatchSignatures function may trigger an index out-of-range panic for consensus nodes, due to missing lower-bound check

high

Attacker can frontrun unstake calls to manipulate withdrawals

high

postBatch doesn’t check for duplicate signatures resulting in being able to overcome the consensus threshold

Jan '25

Liquid Ron

Liquid Ron

0.03 USDC • 2 total findings • Code4rena • DoD4uFN

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

medium

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

IQ AI

IQ AI

1,707.9 USDC • 2 total findings • Code4rena • DoD4uFN

silver

high

Adversary can win proposals with voting power as low as 4%

medium

[M-3] Anyone can deploy a new `FraxSwapPair` with a Low fee incurring losses to the protocol

DAOsis

DAOsis

3,300 wROSE • 4 total findings • Hats • johny37

gold

high

Missing Access Control on burnFrom() Function

high

Missing Handling of Excess Ether in buy() Function

medium

No Time Checks During invest()

low

Potential Duplicate Participant Entries in participants Array

DAOsis

DAOsis

246.2 wROSE • 2 total findings • Hats • dod4ufn

#9

medium

isBuyed function returns wrong remainingAmount values or buy function is incorrectly implemeted

low

Automatic token listing missing

Nov '24

RuneMine by Mine Labs’

RuneMine by Mine Labs’

2,129.47 USDC • Sherlock • dod4ufn

#5

Findings not publicly available for private contests.

Oct '24

Orderly Solana Vault Contract

Orderly Solana Vault Contract

1,997.97 USDC • 2 total findings • Sherlock • dod4ufn

bronze

high

Actor can frontrun lz_receive and steal users’ withdrawal

high

User will be able to use any deposit_token to bridge usdc

Sep '24

WOOFi Swap on Solana

WOOFi Swap on Solana

101.15 USDC • 1 total finding • Sherlock • dod4ufn

#6

medium

Possible DOS of pools leading

Accumulated finance

Accumulated finance

1,100 wROSE • 1 total finding • Hats • johny37

silver

low

Potential Front-Running and DoS Vulnerabilities due to EIP-2612 Usage

Aug '24

Proof Of Humanity V2

Proof Of Humanity V2

500.5 USDC • 1 total finding • Hats • dod4ufn

#5

low

Off-by-One Error in Humanity Expiration Time Checks

Jul '24

Fenix

Fenix

300 USDC • 1 total finding • Hats • dod4ufn

#12

low

permanentTotalSupply may be increased twice as much when depositing

MagicSea - the native DEX on the IotaEVM

MagicSea - the native DEX on the IotaEVM

0.08 USDC • 1 total finding • Sherlock • dod4ufn

#64

medium

Fee on transfer tokens will result in user losses

Jun '24

Velvet Capital

Velvet Capital

400 USDT • 1 total finding • Hats • dod4ufn

#9

medium

Users Unable to Claim Removed Tokens Due to Transfer Failures in claimRemovedTokens Function