https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/cf698cf7-af64-476a-b6bf-a893444b2758.jpg

fedebianu

Security Researcher

web3 security researcher // resident yAudit

Contact Me

High

Total

Medium

Total

$1.09K

Total Earnings

#1465 All Time

8x

Payouts

1x

Top 10

1x

Top 25

3x

Top 50

All

Code4rena

Cantina

Dec '25

Rujira

252.37 USDC • 2 total findings • Code4rena • darksnow

#27

high

Finding not yet public.

medium

Finding not yet public.

Apr '24

DYAD

9.74 USDC • 2 total findings • Code4rena • darksnow

#92

medium

No incentive to liquidate small positions could result in protocol going underwater

medium

Value of kerosene can be manipulated to force liquidate users

Jan '24

Decent

0.12 USDC • 1 total finding • Code4rena • darksnow

#53

high

Anyone can update the address of the Router in the DcntEth contract to any address they would like to set.

lockbox-solana

657.58 USDC • 1 total finding • Cantina • fedebianu

medium

Finding not yet public.

incentive-contracts

167.31 USDC • 1 total finding • Cantina • fedebianu

#27

high

Finding not yet public.

Curves

1.08 USDC • 2 total findings • Code4rena • darksnow

#127

high

Attack to make ````CurveSubject```` to be a ````HoneyPot````

high

Unauthorized Access to setCurves Function

Oct '23

NextGen

0 USDC • 1 total finding • Code4rena • darksnow

#111

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Apr '23

Rubicon v2

0.29 USDC • 1 total finding • Code4rena • darksnow

#121

medium

Calling `ExpiringMarket.stop` and `ExpiringMarket.isClosed` functions cannot pause any functionlities of the market