https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/e1d2d61d-df6b-4e15-bc58-b0a3278bd705.jpg

jayjoshix

Auditor

security researcher

Contact Me

High

Total

Medium

Total

$2.26K

Total Earnings

#1168 All Time

20x

Payouts

1x

3rd Places

3x

Top 10

6x

Top 25

All

Sherlock

Code4rena

Cantina

Immunefi

Mar '26

Current Finance

0.25 USDC • 3 total findings • Sherlock • jayjoshix

#27

high

Liquidation Seize Calculation Uses Spot Price While Eligibility Check Uses EMA Price, Enabling Excess Collateral Extraction

medium

ADL Borrow Deleverage Uses Global Reserve Debt Instead of EMode Group Scoped Debt for Breach Validation

medium

`deposit_limit_breached()` Double-Subtracts `cash_reserve`, Enabling Supply Cap Evasion and Causing Deposit Reverts in Reserve-Heavy Markets

Jan '26

OpenCover Insured Vaults

18.96 USDC • Sherlock • jayjoshix

#60

Hotstuff

25.05 USDC • Sherlock • jayjoshix

#43

Findings not publicly available for private contests.

VII-Finance-Contracts

5.56 OP • 1 total finding • Cantina • jayx

#69

medium

Finding not yet public.

Flying Tulip

98.96 USDC • Sherlock • jayjoshix

#95

Dec '25

Monolith Stablecoin Factory

28.87 USDC • 2 total findings • Sherlock • jayjoshix

#19

medium

Interest Model Severely Undercharges When Rate Decays Below MIN_RATE

medium

`writeOff()` Can Zero Total Debt While Coin Supply Remains

Nov '25

stNXM by EaseDeFi

10.17 USDC • 2 total findings • Sherlock • jayjoshix

#34

high

Exchange Rate Manipulation via Uniswap V3 Spot Price Dependency in LP Valuation

high

Owner Can Steal Vault Funds via removeTokenIdAtIndex Accounting Manipulation

Inverse Finance - Junior Tranche

12.54 USDC • 1 total finding • Sherlock • jayjoshix

medium

JDola ERC-4626 `max*` Functions Do Not Account for Internal Vault Limits

Audit Comp | Vechain | Stargate Hayabusa

31 USDT • 1 total finding • Immunefi • jayx

#37

high

Finding not yet public.

Audit Comp | Firelight

16 USDC • 1 total finding • Immunefi • jayx

#20

medium

Finding not yet public.

Oct '25

Index Fun Order Book

43.38 USDC • 1 total finding • Sherlock • jayjoshix

#12

medium

Integer Division Rounding Enables Free Token Theft in Token Swaps

Saffron Fixed Income Vaults

30.92 USDC • Sherlock • jayjoshix

#36

Audit Comp | Alchemix V3

39 USDC • 3 total findings • Immunefi • jayx

#87

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Avon-Contracts

0.02 USDC • 1 total finding • Cantina • jayx

#39

medium

Finding not yet public.

Sep '25

Super DCA Liquidity Network

292.97 OP • 6 total findings • Sherlock • jayjoshix

high

Attacker can zero out pending staking rewards through minimal stake manipulation

high

Multiple Pools Drain Staking Rewards via Missing Canonical Pool Enforcement

high

Per-Trade Epoch Anchoring Enables 100% Cashback Overpayment via Timing Manipulation

medium

First staker after idle period captures all emissions from zero‑stake interval

medium

Retroactive Mint Rate Application Violates Global Emission Rate Integrity

medium

Hard-coded 6-Decimal Assumption Causes Catastrophic Reward Miscalculation on BNB Chain

BMX Deli Swap

297.49 USDC • 2 total findings • Sherlock • jayjoshix

#10

high

Incentive Front-Loading Due to Incorrect Time Reference in Reward Accrual

medium

Fee Under-Collection in Exact-Output Swaps with Fee-from-Output

Ammplify

38.20 USDC • 3 total findings • Sherlock • jayjoshix

#57

medium

Ineffective transferVaultBalance Function Cannot Migrate Real Vault Balances

medium

NFTManager tokenURI() Reverts Due to Incorrect Diamond Storage Access

medium

ViewWalker Cross-Assignment Bug Causes Incorrect Fee Calculations

Aug '25

USG - Tangent

374.10 USDC • 4 total findings • Sherlock • jayjoshix

#27

high

Unauthorized Access via Spoofed ControlTower Authorization

medium

WUSR Mint Function Overcredits Users Due to Misuse of ERC4626 `previewMint

medium

Missing receive() Functions Break ETH Zap Functionality

medium

Reward Backlog Accumulation Bug Allows First Stakers After Idle Periods to Steal Rewards

kuru-contracts

605.39 USDC • 1 total finding • Cantina • jayx

#31

high

Finding not yet public.

GTE Perps and Launchpad

292.15 USDC • 1 total finding • Code4rena • jayx

#49

medium

EMA-based Mark Price Component Exhibits Excessive Lag Leading to Inaccurate Pricing