https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/5967a0bd-90fe-43ce-867e-44d48768a189.jpg

jo13

Security Researcher

Contact Me

High

Total

Medium

Total

$8.37K

Total Earnings

#732 All Time

27x

Payouts

1x

3rd Places

5x

Top 10

11x

Top 25

All

Sherlock

Code4rena

Immunefi

Apr '26

Clear Macro by Superfluid

4.33 USDC • Sherlock • jo13

#86

Mar '26

Audit Comp | Folks Finance: Staking Contracts

340 USDC • 1 total finding • Immunefi • jo13

#17

medium

Finding not yet public.

Current Finance

0.00 USDC • 1 total finding • Sherlock • jo13

#33

high

Liquidators will seize excess collateral from borrowers during EMA/spot oracle divergence

Jan '26

Olas

0.04 USDC • 2 total findings • Code4rena • jo13

#56

high

Variable Overwrite in checkPoolAndGetCenterPrice() Creates Dead-Code Deviation Check, Leaving All V3 Protocol-Owned Liquidity Operations Unprotected

high

UniswapPriceOracle.validatePrice() TWAP Calculation Flaw

Fluid DEX v2

160.51 USDC • 1 total finding • Sherlock • jo13

#11

medium

Liquidity Layer failure will permanently lock stored token amounts for recipients when `to_ != msg.sender`

OpenCover Insured Vaults

6.14 USDC • Sherlock • jo13

#87

Hotstuff

8.11 USDC • Sherlock • jo13

#62

Findings not publicly available for private contests.

Flying Tulip

32.06 USDC • Sherlock • jo13

#133

Dec '25

Monolith Stablecoin Factory

27.25 USDC • 1 total finding • Sherlock • jo13

#20

medium

Write-off Procedure Can Obliterate System Debt and Disable Redemptions

Nov '25

Brix Money

47.7 USDC • 1 total finding • Code4rena • jo13

medium

Cross-chain unstake and fast redeem operations fail due to minAmountLD not accounting for LayerZero dust removal

SukukFi

2,652.15 USDC • 2 total findings • Code4rena • jo13

high

Missing access control in `WERC7575Vault` allows unauthorized withdrawals

medium

Stale Redemption Liabilities Lead to Leveraged Losses for Remaining Shareholders and Potential Denial of Service

Privacy Cash

8.18 USDC • Sherlock • jo13

#52

Findings not publicly available for private contests.

Audit Comp | Vechain | Stargate Hayabusa

45 USDT • 2 total findings • Immunefi • jo13

#27

high

Finding not yet public.

high

Finding not yet public.

Oct '25

Audit Comp | Belong

389 USDC • 3 total findings • Immunefi • jo13

#14

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Index Fun Order Book

70.67 USDC • 1 total finding • Sherlock • jo13

#10

medium

Emergency Resolution Resolves Wrong Epoch in Rolling Markets

Sep '25

Super DCA Liquidity Network

5.61 OP • 2 total findings • Sherlock • jo13

#44

high

Native-ETH Fee Collection Reverts in `SuperDCAListing.collectFees()`

high

Reward-Index Reset Burns Pending Rewards in `SuperDCAStaking`

Jul '25

DeBank

45.50 USDC • Sherlock • jo13

#48

May '25

LEND

4.06 USDC • 2 total findings • Sherlock • jo13

#101

high

First-time Borrowers Can Borrow Without Collateral Validation

high

Stale Exchange Rate in Supply/Redeem Allows Collateral Inflation

Apr '25

ZKP2P V2

307.71 OP • Sherlock • jo13

Findings not publicly available for private contests.

Mar '25

Symmio, Staking and Vesting

0.00 USDC • 1 total finding • Sherlock • jo13

#18

medium

# Reward Rate Manipulation in SymmStaking Contract

Jan '25

Aave v3.3

31.66 USDC • Sherlock • jo13

#97

Dec '24

Tally ARB Staker

20.90 USDC • Sherlock • jo13

#34

Nov '24

Debita Finance V3

55.16 USDC • 1 total finding • Sherlock • jo13

#37

medium

Incentive Creator's Tokens Permanently Locked in Zero-Activity Epochs

Telcoin Update #2

202.25 USDC • Sherlock • jo13

#11

Sep '24

Flayer

110.45 USDC • 1 total finding • Sherlock • jo13

#53

medium

manipulation of the Utilization Rates using the locker.sol function deposit and redeem to Force Liquidations

Jul '24

LoopFi

0 USDC • Code4rena • jo13

#58

May '24

PoolTogether: The Prize Layer for DeFi

3,796.61 USDC • 2 total findings • Sherlock • jo13

high

PoolTogether on Blast L2: Rebasing WETH Allows Malicious Users to Inflate Contributions and Manipulate Prize Odds

medium

Gas Manipulation by Malicious Winners in claimPrizes Function