Security Researcher
High
Total
Medium
Total Earnings
#1256 All Time
Payouts
1st Places
Top 10
Top 25
All
Sherlock
Code4rena
Jan '25
0 USDC • 1 total finding • Code4rena • miaowu
#12
medium
Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions
Dec '24
615.38 USDC • 1 total finding • Sherlock • miaowu
PythOracle may return expired prices
Apr '24
24.59 USDC • 2 total findings • Code4rena • miaowu
#79
high
Kerosene collateral is not being moved on liquidation, exposing liquidators to loss
No incentive to liquidate when CR <= 1 as asset received < dyad burned
Feb '24
7.18 USDC • 1 total finding • Code4rena • miaowu
#34
Holders array can be manipulated by transferring or burning with amount 0, stealing rewards or bricking certain functions
Jan '24
272.92 USDC • 3 total findings • Code4rena • miaowu
#45
The use of spot price by CoreSaltyFeed can lead to price manipulation and undesired liquidations
Attacker Can Inflate LP Position Value To Create a Bad Debt Loan
Adversary can prevent updating price feed addresses by creating poisonous proposals ending in `_confirm`
