fuzious

Security Researcher

Buidling Block By Block ⛓ @skate_chain 👨‍🔬 Prev. @CertiK , @0xPolygon , @unizen_io ♥ Politics 🌏 Cricket🏏

Contact Me

High

Total

Medium

Total

$13.90K

Total Earnings

#568 All Time

6x

Payouts

1x

2nd Places

1x

3rd Places

3x

Top 10

All

Sherlock

Code4rena

Jun '26

DRE App - dreUSD

378.85 USDC • Sherlock • fuzious

Apr '26

K2

638.85 USDC • 5 total findings • Code4rena • fuzious

#16

high

Self-liquidation with `receive_a_token = true` bypasses collateral seizure via `from == to` self-transfer in `transfer_on_liquidation`, socializing residual debt to reserve deficit

high

Same-Asset Borrow Positions Can Become Insolvent With No Working Liquidation Path

medium

Indebted users can be blocked from otherwise-safe aToken transfers

medium

Inactive collateral remains counted for new borrowing while liquidation and withdrawal reject the same reserve as `AssetNotActive`

medium

Reserve factor changes do not affect treasury accrual until an unrelated rate-recalc path runs

XRP Ledger - April 2026

537.58 USDC • Sherlock • fuzious

#69

Jan '26

Fluid DEX v2

11,235.77 USDC • 3 total findings • Sherlock • fuzious

high

Malicious Position Owner Will Drain Token Liquidity from the Protocol

medium

An attacker will permanently lock net-out proceeds for D3/D4 users

medium

Liquidators will block full liquidation for MoneyMarket borrowers

Dec '25

Panoptic: Next Core

1,106.91 USDC • 2 total findings • Code4rena • fuzious

#10

medium

`dispatchFrom()` Liveness DoS via `StaleOracle`: Spot Price Manipulation Blocks Liquidations, Force Exercises, and Premium Settlements

medium

Commission Share-Burn Distribution is JIT-Capturable When `builderCode == 0` (Default)

Rujira

0.01 USDC • 4 total findings • Code4rena • fuzious

#52

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.