https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/ca7d75a0-5b05-4096-9b9d-351ed2042119.png

mussucal

Security Researcher

Smart Contract Security Researcher

Contact Me

High

7

Total

Medium

3

Total

$2.41K

Total Earnings

#957 All Time

11x

Payouts

regular

1x

Top 10

regular

3x

Top 25

regular

7x

Top 50

All

Sherlock

Code4rena

Cantina

Mar '25

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

3.57 USDC • Sherlock • mussucal

#67

Feb '25

Usual Labs

Usual Labs

44.12 USDC • Sherlock • mussucal

#40

Yieldoor

Yieldoor

29.53 USDC • 1 total finding • Sherlock • mussucal

#21

high

Error in `Strategy.collectFees()`

defi-app-contracts

defi-app-contracts

1,339.08 USDC • 1 total finding • Cantina • mussucal

#8

high

Finding not yet public.

Apr '24

Renzo

Renzo

13.57 USDC • 3 total findings • Code4rena • mussucal

#46

high

Incorrect withdraw queue balance in TVL calculation

high

Incorrect calculation of queued withdrawals can deflate TVL and increase ezETH mint rate

medium

Deposits will always revert if the amount being deposited is less than the bufferToFill value

Feb '24

Rio Network

Rio Network

5.57 USDC • 1 total finding • Sherlock • mussucal

#31

high

currentEpochsByAsset[asset] is not being updated correctly

Jan '24

Salty.IO

Salty.IO

0.78 USDC • 1 total finding • Code4rena • mussucal

#117

high

User can evade `liquidation` by depositing the minimum of tokens and gain time to not be liquidated

reNFT

reNFT

223.77 USDC • Code4rena • mussucal

#35

Dec '23

Ethereum Credit Guild

Ethereum Credit Guild

15.21 USDC • 1 total finding • Code4rena • mussucal

#85

medium

LendingTerm::debtCeiling() can return wrong debt as the min() is evaluated incorrectly

Aug '23

Dopex

Dopex

0.07 USDC • 1 total finding • Code4rena • mussucal

#126

high

The peg stability module can be compromised by forcing lowerDepeg to revert.

May '23

Venus Protocol Isolated Pools

Venus Protocol Isolated Pools

732 USDC • 1 total finding • Code4rena • mussucal

#23

medium

liquidateAccount will fail if transaction is not included in current block