https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/9840ef2c-619e-43ed-941c-5820235cbd47.jpg

eLSeR17

Security Researcher

Looking for bugs anywhere :D

Contact Me

High

3

Total

Medium

7

Total

$8.10K

Total Earnings

#660 All Time

13x

Payouts

bronze

2x

3rd Places

regular

4x

Top 10

regular

5x

Top 25

All

Sherlock

Jul '25

DeBank

DeBank

24.75 USDC • Sherlock • eLSeR17

#64

Jun '25

DODO Cross-Chain DEX

DODO Cross-Chain DEX

0.26 USDC • 1 total finding • Sherlock • eLSeR17

#72

medium

USDT cannot be sent from a connected chain to ZetaChain

May '25

LayerEdge - Staking

LayerEdge - Staking

7.19 USDC • 1 total finding • Sherlock • eLSeR17

#7

medium

Users may find impossible to update their unclaimed interest

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

4.83 USDC • Sherlock • eLSeR17

#65

Crestal Network

Crestal Network

77.24 USDC • 2 total findings • Sherlock • eLSeR17

#4

high

Payment.payWithERC20() function allows any user to steal ERC20 tokens approved for Blueprint contract

medium

Whitelist used for agent creation can be easily bypassed

Feb '25

Usual Labs

Usual Labs

59.58 USDC • Sherlock • eLSeR17

#38

Yieldoor

Yieldoor

29.53 USDC • 1 total finding • Sherlock • eLSeR17

#21

high

Strategy.collectFees() will not correctly claim the fees of VestingPosition

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • eLSeR17

bronze

medium

Launch.updateParticipation() incorrectly updates launchTokens allocated for user

Jan '25

Plaza Finance

Plaza Finance

0.23 USDC • 1 total finding • Sherlock • eLSeR17

#99

medium

Malicious bidder can get blacklisted to prevent other users from bidding

Nov '24

Ethos Network Financial Contracts

Ethos Network Financial Contracts

55.83 USDC • 1 total finding • Sherlock • eLSeR17

#30

medium

Wrong fee calculation and distribution when creating or increasing a Vouch

Telcoin Update #2

Telcoin Update #2

0.04 USDC • Sherlock • eLSeR17

#56

Sep '24

Boost Core Incentive Protocol

Boost Core Incentive Protocol

7,840.68 USDC • 1 total finding • Sherlock • eLSeR17

bronze

high

IncentiveBits.setOrThrow() will revert, leading to a DoS

Jul '24

MagicSea - the native DEX on the IotaEVM

MagicSea - the native DEX on the IotaEVM

0.48 USDC • 1 total finding • Sherlock • eLSeR17

#63

medium

_requireOnlyApprovedOrOwnerOf() reverts if approved by using ERC721Upgradeable.setApprovalForAll()