https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/e0c7eaa8-c7fc-494b-bf98-922fcb15a334.png

illoy_sci

Security Researcher

Contact Me

High

Total

Medium

Total

$2.43K

Total Earnings

#1091 All Time

10x

Payouts

1x

3rd Places

4x

Top 10

8x

Top 25

All

Sherlock

Code4rena

Oct '25

3Jane

50.54 USDC • Sherlock • illoy_sci

#19

Findings not publicly available for private contests.

Sep '25

Super DCA Liquidity Network

232.28 OP • 2 total findings • Sherlock • illoy_sci

#17

high

A unlisted pool can use SuperDCAGauge as hook and trigger reward distribution

high

SuperDCAStaking::stake/unstake functions will make that staking bucket lose rewards

Rezerve Money

1,118.71 USDC • Sherlock • illoy_sci

#12

Findings not publicly available for private contests.

Aug '25

USG - Tangent

8.78 USDC • 2 total findings • Sherlock • illoy_sci

#60

high

Misuse of MarketCore::_verifySenderMigrator allows users to authenticate themselves as migrator

medium

Short circuit check in RewardAccumulator::_updateReward allows retroactive reward claiming

Jul '25

Mellow Flexible Vaults

2.67 USDC • 2 total findings • Sherlock • illoy_sci

#41

high

Consensus::checkSignatures can be bypassed with only one valid signature

medium

Incorrect boolean logic in ShareManager::updateChecks bricks allowed transfers

Jun '25

Chainlink Rewards

1.42 USDC • Code4rena • Illoy-Scizceneghposter

Superfluid Locker System

960.18 USDC • 3 total findings • Sherlock • illoy_sci

high

Staked tokens inside FluidLocker can be withdrawn without calling Unstake

high

Pumponomics can be skipped when using FluidLocker::provideLiquidity

medium

FluidLocker::provideLiquidity can withdraw FLUID token even when UNLOCK_AVAILABLE is false

May '25

LayerEdge - Staking

7.19 USDC • 1 total finding • Sherlock • illoy_sci

medium

User's Tier History could be grown by others indefinitely, leading to DoS via unbounded gas consumption

Mar '25

Forte: Float128 Solidity Library

45.17 USDC • 1 total finding • Code4rena • Illoy-Scizceneghposter

#25

high

Sqrt function silently reverts the entire control flow when a packed float of 0 value is passed

Feb '25

THORWallet

0.35 USDC • 2 total findings • Code4rena • Illoy-Scizceneghposter

high

MergeTgt has no handling if TGT_TO_EXCHANGE is exceeded during the exchange period

medium

Improper Transfer Restrictions on Non-Bridged Tokens Due to Boolean Bridged Token Tracking, Allowing a DoS Attack Vector