https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/5967a0bd-90fe-43ce-867e-44d48768a189.jpg

jo13

Security Researcher

Contact Me

High

Total

Medium

Total

$4.67K

Total Earnings

#880 All Time

14x

Payouts

3x

Top 10

5x

Top 25

9x

Top 50

All

Sherlock

Cantina

Nov '25

Privacy Cash

8.18 USDC • Sherlock • jo13

#52

Findings not publicly available for private contests.

Oct '25

Index Fun Order Book

70.67 USDC • 1 total finding • Sherlock • jo13

#10

medium

Emergency Resolution Resolves Wrong Epoch in Rolling Markets

Sep '25

Super DCA Liquidity Network

5.61 OP • 2 total findings • Sherlock • jo13

#44

high

Native-ETH Fee Collection Reverts in `SuperDCAListing.collectFees()`

high

Reward-Index Reset Burns Pending Rewards in `SuperDCAStaking`

Jul '25

DeBank

45.50 USDC • Sherlock • jo13

#48

May '25

LEND

4.06 USDC • 2 total findings • Sherlock • jo13

#101

high

First-time Borrowers Can Borrow Without Collateral Validation

high

Stale Exchange Rate in Supply/Redeem Allows Collateral Inflation

Apr '25

ZKP2P V2

307.71 OP • Sherlock • jo13

Findings not publicly available for private contests.

Mar '25

Symmio, Staking and Vesting

0.00 USDC • 1 total finding • Sherlock • jo13

#18

medium

# Reward Rate Manipulation in SymmStaking Contract

Jan '25

Aave v3.3

31.66 USDC • Sherlock • jo13

#97

Dec '24

Tally ARB Staker

20.90 USDC • Sherlock • jo13

#34

Nov '24

Debita Finance V3

55.16 USDC • 1 total finding • Sherlock • jo13

#37

medium

Incentive Creator's Tokens Permanently Locked in Zero-Activity Epochs

Telcoin Update #2

202.25 USDC • Sherlock • jo13

#11

Oct '24

stakeup-bloomv2

13.12 USDC • 1 total finding • Cantina • jo13

#81

high

Finding not yet public.

Sep '24

Flayer

110.45 USDC • 1 total finding • Sherlock • jo13

#53

medium

manipulation of the Utilization Rates using the locker.sol function deposit and redeem to Force Liquidations

May '24

PoolTogether: The Prize Layer for DeFi

3,796.61 USDC • 2 total findings • Sherlock • jo13

high

PoolTogether on Blast L2: Rebasing WETH Allows Malicious Users to Inflate Contributions and Manipulate Prize Odds

medium

Gas Manipulation by Malicious Winners in claimPrizes Function