Banner
https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/63efb7b3-3bb4-45ac-8384-ec69ce16dd1d.jpg

nikhil840096

Security Researcher

Contact Me

High

11

Total

Medium

1

Solo

14

Total

$2.38K

Total Earnings

#953 All Time

15x

Payouts

regular

2x

Top 10

regular

6x

Top 25

regular

8x

Top 50

All

Sherlock

Code4rena

CodeHawks

Dec '24

QuantAMM

QuantAMM

112.20 op • 1 total finding • CodeHawks • nikhil20

#51

high

GradientBasedRules will not work for >=4 assets with vector lambdas

Tally ARB Staker

Tally ARB Staker

228.49 USDC • Sherlock • nikhil840096

#12

SecondSwap

SecondSwap

2.81 USDC • 2 total findings • Code4rena • nikhil840096

#60

high

Users can claim more that their actual allotment

medium

maxSellPercent can be buypassed by selling previously bought vestings at a later time

Oku's New Order Types Contract Contest

Oku's New Order Types Contract Contest

1.54 OP • 2 total findings • Sherlock • nikhil840096

#54

high

Attacker can steal the deposits , when user tries to deposit using permit2.

high

Collision attack may lead to the loss of funds for the user.

Nov '24

Nouns DAO - Auction Streams

Nouns DAO - Auction Streams

135.39 USDC • Sherlock • nikhil840096

#25

Debita Finance V3

Debita Finance V3

601.06 USDC • 4 total findings • Sherlock • nikhil840096

#12

medium

Precision loss in while calculating the fee in `DebitaV3Aggregator::matchOffersV3`.

medium

Vulnerability in `DLOFactory::deleteOrder()` allows owner of `DLOImplementation` to decrease `activeOrdersCount` as much they want.

medium

Overflow in `DebitaV3Loan::extendLoan()`.

medium

Overflow while calculating fee in `DebitaV3Loan::extendLoan`.

Telcoin Update #2

Telcoin Update #2

17.96 USDC • Sherlock • nikhil840096

#37

Project

Project

606.17 USDC • 1 total finding • CodeHawks • nikhil20

#7

high

MembershipERC1155 proxy cannot be upgraded

Aug '24

Cork Protocol

Cork Protocol

227.92 USDC • 2 total findings • Sherlock • nikhil840096

#9

high

Wrong handling of `reservedDs` leading wrong accounting and loss of funds

high

User can redeem extra `ra` in exchange of `ct` token.

Rumpel Point Tokenization Protocol

Rumpel Point Tokenization Protocol

0.44 USDC • Sherlock • nikhil840096

#37

Tadle

Tadle

2.94 USDC • 5 total findings • CodeHawks • nikhil20

#137

high

Incorrect set up and logic of `referralInfoMap` in `SystemConfig::updateReferrerInfo` function

medium

Unnecessary balance checks and precision issues in TokenManager::_transfer

low

[Low-01] Missing Access Control in `CapitalPool::approve()` Function Allows any User to call it to set Allowance Amount `TokenContract` to `type(uint256).max`.

low

`listOffer` Unsafely References Fungible Identifiers

low

PreMarkets - Unable to withdraw platform rewards

Jul '24

TraitForge

TraitForge

52.46 USDC • 3 total findings • Code4rena • nikhil840096

#55

high

Number of entities in generation can surpass the 10k number

medium

Imprecise token age calculation results in an incorrect nuke factor, causing users to claim the wrong amount

medium

TraitForgeNft: Generations without a golden god are possible

Zaros Part 1

Zaros Part 1

6.08 USDC • 1 total finding • CodeHawks • nikhil20

#92

medium

A malicious User can DOS all offchain orders making them unexecutable and leaving the protocol in an insolvent state. Also all offchain Trades can also be DOSed for honest parties that do not meet the fillorder requirements (no try and catch)

MagicSea - the native DEX on the IotaEVM

MagicSea - the native DEX on the IotaEVM

2.35 USDC • 2 total findings • Sherlock • nikhil840096

#59

high

Voting Malfunction Leading to Core Protocol Vulnerability

medium

Access Control Vulnerability in `MlumStaking.sol:addToPosition`

May '24

Elfi

Elfi

384.21 USDC • 5 total findings • Sherlock • nikhil840096

#14

high

Depositors will loose extra balance while withdrawing there balance from the protocol.

medium

Critical Vulnerability Allowing Users to Exceed `collateralUserCap` in `AssetsProcess.sol:deposit` function.

medium

The `lossFee` is simply added to the `commonData` and not reimbursed to the keeper, leading to potential losses for the keeper.

medium

Miscalculation results in the protocol not accounting for and managing actual losses incurred by the keeper.

medium

The implementation of `payExecutionFee()` didn't take `EIP-150` into consideration. Keepers can steal additional execution fee from users.