https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/ec51101d-7b08-4176-8886-97bbba811c23.jpg

iam0ti

Security Researcher

seek discomfort.

Contact Me

High

Total

Medium

Total

$1.59K

Total Earnings

#1219 All Time

8x

Payouts

1x

3rd Places

1x

Top 10

4x

Top 25

All

Sherlock

Cantina

CodeHawks

Sep '25

Ammplify

116.31 USDC • 1 total finding • Sherlock • iam0ti

#38

medium

Incorrect root width calculation in `calcRootWidth` may produce invalid tree indices

Jul '25

Allbridge Core Yield

150.46 USDC • 1 total finding • Sherlock • iam0ti

medium

Attacker will steal funds from depositors through share inflation attack

May '25

mystic-monorepo

44.64 USDC • 2 total findings • Cantina • IAM0TI

#50

medium

Finding not yet public.

medium

Finding not yet public.

Apr '25

mighty-contracts

153 USDC • 6 total findings • Cantina • IAM0TI

#25

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

high

Finding not yet public.

medium

Finding not yet public.

mezo-monorepo

659.8 USDC • 1 total finding • Cantina • IAM0TI

#20

high

Finding not yet public.

Mar '25

colorpool-chromia

302.5 USDC • 2 total findings • Cantina • IAM0TI

#20

high

Finding not yet public.

medium

Finding not yet public.

Feb '25

velvet-v4

64.47 USDC • 1 total finding • Cantina • IAM0TI

#30

medium

Finding not yet public.

Core Contracts

97.68 usdc • 11 total findings • CodeHawks • anomX

#145

high

RAACNFT mint function receives funds to address(this) but has no way of withdrawing them

high

Reward manipulation vulnerability in StabilityPool

high

RToken's transfer function lead to loss of funds due to incorrect math

high

NFTs Get Permanently Locked in Stability Pool After Liquidation

medium

Incorrect utilization rate forces protocol to issue maximum rewards indefinitely

medium

Incorrect DebtToken totalSupply Scaling Breaks Interest Rate Calculations

medium

Users Can Lose Funds and Collateral by Repaying Loans After Liquidation Grace Period Expiry

medium

`RToken::calculateDustAmount` are incorrectly calculated, leading to not be able to transfer the accrued dust amount

medium

getNormalizedDebt will return a wrong Amount when Timedelta is 0.

medium

`ReserveLibrary.getNormalizedDebt` doesn't return normalized debt

low

Incorrect Timestamp Tracking in RAACHousePrice contract