https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/b4db94e5-1e4d-4702-b50a-ef95953ba6d0.png

lucky-gru

Security Researcher

Contact Me

High

4

Total

Medium

3

Total

$342.00

Total Earnings

#1762 All Time

4x

Payouts

regular

1x

Top 10

regular

1x

Top 25

regular

2x

Top 50

All

Sherlock

Nov '25

stNXM by EaseDeFi

stNXM by EaseDeFi

0.01 USDC • 1 total finding • Sherlock • lucky-gru

#52

high

Attacker will extract real wNXM from the vault using manipulated ERC4626 conversions

Oct '25

Saffron Fixed Income Vaults

Saffron Fixed Income Vaults

30.80 USDC • Sherlock • lucky-gru

#37

Sep '25

Super DCA Liquidity Network

Super DCA Liquidity Network

291.84 OP • 4 total findings • Sherlock • lucky-gru

#5

high

Cashback accrues retroactively from trade.startTime, allowing users to claim rewards for periods before program launch

high

Cross-Pool Race Condition and Reward Starvation due to Global Reward Index

medium

Hard-coded 6-decimals assumption causes systematic under/over-payment across chains and tokens

medium

Emissions accrue during zero-stake idle periods, allowing first staker to drain all historical rewards

Aug '25

USG - Tangent

USG - Tangent

19.89 USDC • 2 total findings • Sherlock • lucky-gru

#57

high

unauthorized collateral & debt manipulation / full account takeover by caller-supplied ControlTower

medium

OraclePendlePT.latestAnswer mis-scales PT rate for some markets