https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/20872233-e77e-4501-86d9-882c9cabdcf6.jpeg

elvin.a.block

Security Researcher

Contact Me

High

9

Total

Medium

12

Total

$645.00

Total Earnings

#1411 All Time

8x

Payouts

regular

1x

Top 25

regular

4x

Top 50

All

Sherlock

Code4rena

CodeHawks

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

3.22 USDC • Sherlock • elvin.a.block

#70

Feb '25

Yieldoor

Yieldoor

13.90 USDC • 2 total findings • Sherlock • elvin.a.block

#25

high

Leverage Validation Bypass via Incorrect Collateral Calculation in `Leverager._checkWithinlimits()`

medium

Incorrect Debt Accounting for `Token1` Denominated Position Causes Withdrawal Failures due to Underflow Error

Core Contracts

Core Contracts

123.44 usdc • 12 total findings • CodeHawks • elvin_a_block

#125

high

Multiple issues from unnecessary balance increase calculation in DebtToken.mint

high

Double Usage Index Scaling in StabilityPool Liquidation Inflates Required CRVUSD Balance

high

Attackers can double voting power and veToken amount by locking and increasing

medium

`MAX_TOTAL_SUPPLY` Bypass in `veRAACToken` via `increase()` Function

medium

Missing Boost Balance and other parameters Update in veRAACToken Functions. Incomplete Boost State Updates Result in Inaccurate Voting Power and Reward Distribution

medium

Incorrect utilization rate forces protocol to issue maximum rewards indefinitely

medium

LendingPool deposits do not work with CurveVault due to lack of funds

medium

There is no logic checking for RAACNFT price staleness before minting it

medium

LendingPool.getUserDebt returns outdated value and can lead to liquidation failure

medium

Missing Boost State Update in extend() and withdraw()

low

Limited veRaac Token Supply Triggers DoS, Hampering Proper Governance Participation.

low

Incorrect Emission Rate Calculation in RAACMinter Creates Liquidity Bootstrapping Risk with Zero Deposits

Jan '25

Part 2

Part 2

132.26 usdc • 3 total findings • CodeHawks • elvin_a_block

#40

high

Incorrect Credit Capacity Validation in `VaultRouterBranch.redeem` Enables Locked Collateral Drainage

medium

rebalanceVaultsAssets incorrectly accounts vaults' depositedUsdc

low

Total debt used in fulfiling swap actions is wrong because we did not update the vault.

Plaza Finance

Plaza Finance

52.89 USDC • 2 total findings • Sherlock • elvin.a.block

#47

high

Incorrect Period Index in `Pool.transferReserveToAuction` Will Block Coupon Distributions

medium

Leverage token holders will suffer unredeemable reserves due to truncation in redeem rate calculation

Dec '24

QuantAMM

QuantAMM

320.04 op • 3 total findings • CodeHawks • elvin_a_block

#28

high

Out-of-Bounds Array Access in `_calculateQuantAMMVariance` with Odd Number of Assets and Vector Lambda

medium

“Uplift Fee” Incorrectly Falls Back to Minimum Fee Due to Integer Division

low

`minWithdrawalFeeBps` are not added to `upliftFeeBps` causing loss of fees and allowing MEV actions

SecondSwap

SecondSwap

0.03 USDC • 2 total findings • Code4rena • elvin-a-block

#66

high

Users can claim more that their actual allotment

medium

Incorrect referral fee calculations

Oku's New Order Types Contract Contest

Oku's New Order Types Contract Contest

0.00 OP • 1 total finding • Sherlock • elvin.a.block

#66

high

Duplicate Order IDs Can Lead to Order Overwriting and Fund Loss