Banner
https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/5e3a0cac-bd64-44d2-a569-b37aaeb535b1.png

dystopia

Security Researcher

https://t.co/SnjCqN325i

Contact Me

High

12

Total

Medium

8

Total

$2.30K

Total Earnings

#1018 All Time

6x

Payouts

regular

3x

Top 25

regular

5x

Top 50

All

Sherlock

Code4rena

Cantina

CodeHawks

May '25

LEND

LEND

57.83 USDC • 7 total findings • Sherlock • dystopia

#38

high

Underreporting of Cross-Chain Borrows Leading to Incorrect Liquidity Calculations

high

Incorrect Liquidity Check Allowing Users to Borrow Beyond Collateral Limits

high

Incorrect Liquidation Validation Leading to Unauthorized Liquidations in CrossChainRouter.sol contracts

high

Inconsistent Borrow Balance Calculation in CrossChainRouter.sol

high

Liquidator does not repay any debt on Chain B, yet receives collateral from Chain A

high

Uninitialized Borrow State Exploit causing users to create undercollateralized positions using CoreRouter.sol

medium

Borrower Retains Collateral Post-Liquidation

superform-core

superform-core

215.63 USDC • 2 total findings • Cantina • dystopia

#22

high

Finding not yet public.

medium

Finding not yet public.

mystic-monorepo

mystic-monorepo

121.23 USDC • 5 total findings • Cantina • dystopia

#28

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Apr '25

Kinetiq

Kinetiq

568.42 USDC • Code4rena • dystopia

#11

Mar '25

StarkWare Perps

StarkWare Perps

1,271.9 USDC • Code4rena • dystopia

#15

Feb '25

Core Contracts

Core Contracts

62.84 usdc • 7 total findings • CodeHawks • dystopiaxyz

#184

high

Wrong amount is minted to user when they deposit into the lending pool

high

RToken is Not Interest Bearing Due to Broken Liquidity Index Calculation

high

Voting Power Snapshot Missing

medium

Timelock Controller Retains Canceled Proposals, Enabling Unauthorized Execution and severe Governance Voting manipulation.

medium

Emergency revoke in RAACReleaseOrchestrator will freeze revoked RAAC tokens in orchestrator

medium

Proposal Front-Running via Predictable Salt in `TimelockController::scheduleBatch`

low

Indefinite Extension of Delegation in function delegateBoos() in BoostController.sol