https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/ca7d75a0-5b05-4096-9b9d-351ed2042119.png

mussucal

Security Researcher

Smart Contract Security Researcher

Contact Me

High

Total

Medium

Total

$2.82K

Total Earnings

#973 All Time

15x

Payouts

1x

Top 10

4x

Top 25

9x

Top 50

All

Sherlock

Code4rena

Cantina

Jul '25

DeBank

28.44 USDC • Sherlock • mussucal

#59

May '25

LEND

108.28 USDC • 4 total findings • Sherlock • mussucal

#30

high

Desynchronization Vulnerability in Cross-Chain Lending

high

Missing `isSameChain` Check in `_repayBorrowInternal()` Function

high

`LendStorage.distributeBorrowerLend()` should be called before updating borrower amount.

medium

Incorrect collateral accounting in cross-chain borrow.

stability-contracts

243.06 USDC • 1 total finding • Cantina • mussucal

#14

high

Finding not yet public.

mystic-monorepo

35.91 USDC • 4 total findings • Cantina • mussucal

#57

high

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

medium

Finding not yet public.

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

3.57 USDC • Sherlock • mussucal

#67

Feb '25

Usual Labs

44.12 USDC • Sherlock • mussucal

#40

Yieldoor

29.53 USDC • 1 total finding • Sherlock • mussucal

#21

high

Error in `Strategy.collectFees()`

defi-app-contracts

1,339.08 USDC • 1 total finding • Cantina • mussucal

high

Finding not yet public.

Apr '24

Renzo

13.57 USDC • 3 total findings • Code4rena • mussucal

#46

high

Incorrect withdraw queue balance in TVL calculation

high

Incorrect calculation of queued withdrawals can deflate TVL and increase ezETH mint rate

medium

Deposits will always revert if the amount being deposited is less than the bufferToFill value

Feb '24

Rio Network

5.57 USDC • 1 total finding • Sherlock • mussucal

#31

high

currentEpochsByAsset[asset] is not being updated correctly

Jan '24

Salty.IO

0.78 USDC • 1 total finding • Code4rena • mussucal

#117

high

User can evade `liquidation` by depositing the minimum of tokens and gain time to not be liquidated

reNFT

223.77 USDC • Code4rena • mussucal

#35

Dec '23

Ethereum Credit Guild

15.21 USDC • 1 total finding • Code4rena • mussucal

#85

medium

LendingTerm::debtCeiling() can return wrong debt as the min() is evaluated incorrectly

Aug '23

Dopex

0.07 USDC • 1 total finding • Code4rena • mussucal

#126

high

The peg stability module can be compromised by forcing lowerDepeg to revert.

May '23

Venus Protocol Isolated Pools

732 USDC • 1 total finding • Code4rena • mussucal

#23

medium

liquidateAccount will fail if transaction is not included in current block