mgf15

Security Researcher

745fe9f9c2

Contact Me

High

Total

Medium

Total

$1.46K

Total Earnings

#1089 All Time

24x

Payouts

1x

1st Places

5x

Top 10

7x

Top 25

All

Sherlock

Code4rena

CodeHawks

Dec '24

Alchemix Transmuter

0.00 op • 1 total finding • CodeHawks • mgf15

#31

low

Old router retains token allowance after update

Flex Perpetuals

62.48 USDC • 1 total finding • Code4rena • mgf15

medium

Missing slippage protection in `AerodromeDexter.sol` `swapExactTokensForTokens()`

Teller Lender Groups Update Audit

134.33 USDC • 1 total finding • Sherlock • mgf15

medium

uses `ERC20.approve` instead of safe approvals, causing it to always revert on some ERC20s

Lambo.win

0 USDC • 1 total finding • Code4rena • mgf15

#36

high

Minting zero tokens when underlyingToken is not Ether in cashIn()

Nov '24

vVv Launchpad - Investments & Token distribution

94.59 USDC • 1 total finding • Sherlock • mgf15

high

attacker can front-run `claim` function and steal user tokens

Oct '24

Dria

4.04 USDC • 1 total finding • CodeHawks • mgf15

#65

low

Sequential Fee Calculations Lead to Lost Platform Revenue Due to Precision Loss

Aug '24

Tadle

4.88 USDC • 3 total findings • CodeHawks • mgf15

#116

high

Incorrect set up and logic of `referralInfoMap` in `SystemConfig::updateReferrerInfo` function

high

TokenManager - Unlimited withdraw

low

CreateOffer allows eachTradeTax to be 100% ( 10000 bp ) violating code assumptions

Jul '24

TraitForge

0 USDC • 1 total finding • Code4rena • mgf15

#89

medium

Pause and unpause functions are inaccessible

Basin

135.48 USDC • 1 total finding • Code4rena • mgf15

high

`WellUpgradeable` can be upgraded by anyone

Apr '24

Teller Finance

49.68 USDC • 2 total findings • Sherlock • mgf15

#27

high

IERC20.transferFrom wil fail for USDT

medium

`executeOperation` will revert if _flashToken is USDT

Jan '24

MorpheusAI

2.82 USDC • 1 total finding • CodeHawks • mgf15

#27

low

Any User can mint any amount of WStETH in the WStETHMock.sol and StETHMock.sol

Decent

0.09 USDC • 1 total finding • Code4rena • mgf15

#56

high

Anyone can update the address of the Router in the DcntEth contract to any address they would like to set.

Curves

7.43 USDC • Code4rena • mgf15

#85

reNFT

42.44 USDC • Code4rena • mgf15

#47

Nov '23

Canto Application Specific Dollars and Bonding Curves for 1155s

91.26 USDC • Code4rena • mgf15

#20

Oct '23

Badger eBTC Audit + Certora Formal Verification Competition

21.02 USDC • Code4rena • mgf15

#17

Brahma

129.7 USDC • Code4rena • mgf15

#10

Jul '23

Foundry DeFi Stablecoin CodeHawks Audit Contest

0.04 USDC • 2 total findings • CodeHawks • mgf15

#159

low

Pragma isn't specified correctly which can lead to nonfunction/damaged contract when deployed on Arbitrum

gas

`++i`/`i++` should be `unchecked{++i}`/`unchecked{i++}` when it is not possible for them to overflow, as is the case when used in `for`- and `while`-loops

CodeHawks Escrow Contract - Competition Details

25.59 USDC • 1 total finding • CodeHawks • mgf15

#59

gas

Events may be emitted out of order due to reentrancy

Tapioca DAO

459.56 USDC • Code4rena • mgf15

#57

Jun '23

Lybra Finance

80.43 USDC • Code4rena • mgf15

#61

Stader Labs

40.19 USDC • Code4rena • mgf15

#33

May '23

Maia DAO Ecosystem

74.27 USDC • Code4rena • mgf15

#63

Jan '23

Popcorn contest

1.15 USDC • 1 total finding • Code4rena • mgf15

#91

high

Staking rewards can be drained