https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/b25890aa-0ed2-4aa3-9fd4-52c985cd9451.jpg

no

Security Researcher

web3 dev

Contact Me

High

8

Total

Medium

8

Total

$2.08K

Total Earnings

#1007 All Time

7x

Payouts

bronze

1x

3rd Places

regular

3x

Top 10

regular

6x

Top 25

All

Sherlock

May '24

Gamma - Locked Staking Contract

Gamma - Locked Staking Contract

133.81 USDC • 1 total finding • Sherlock • no

bronze

medium

Calculating reward in `exitLateById` is not right

Napier Finance - LST/LRT Integrations

Napier Finance - LST/LRT Integrations

851.14 USDC • 4 total findings • Sherlock • no

#7

medium

Using deprecated interfaces `PUFFER_DEPOSITOR.depositStETH()` causes DOS

medium

Invalid check for repayAmount in `MetapoolRouter::receiveFlashLoan` cause DOS

medium

Checking `RSETH_DEPOSIT_POOL.minAmountToDeposit()` in `RsETHAdapter::_stake()` causes Dos

medium

Checking return share in `_stake()` causes Dos

Apr '24

Teller Finance

Teller Finance

619.78 USDC • 8 total findings • Sherlock • no

#8

high

Burning shares token before calculating in `burnSharesToWithdrawEarnings()` causing error result

high

Use safeTransferFrom() instead of transferFrom()

high

Checking for Collateral required in LenderCommitmentGroup_Smart::acceptFundsForAcceptBid is incorrect

high

`TellerV2::repayLoan()` can be frontrun to profit from an increase in share price

high

Missing interest when calculating Amount owed for a bid in `LenderCommitmentGroup_Smart::liquidateDefaultedLoanWithIncentive()`

high

The collateral Token is mistakenly given to the lender when the liquidator call liquidateDefaultedLoanWithIncentive()

medium

`sharesExchangeRate()` may be zero causing Users mint zero shares token in `lenderCommitmentGroupSmart.addPrincipalToCommitmentGroup()`

medium

Calling the wrong function name in `FlashRolloverLoan_G5::_acceptCommitment()` resulted in a Denial of Service (DOS)

Mar '24

vVv Vesting & Staking

vVv Vesting & Staking

4.31 USDC • Sherlock • no

#37

Axis Finance

Axis Finance

421.39 USDC • 1 total finding • Sherlock • no

#15

high

Missing `configureClaimableGas()` in the constructor function of `BlastGas`

Zap Protocol

Zap Protocol

9.97 USDC • 1 total finding • Sherlock • no

#12

high

Reentrancy in `Vesting::claim()` allows draining Vesting pool

Amphor

Amphor

38.91 USDC • 1 total finding • Sherlock • no

#12

medium

In `VaultZapper::_transferTokenInAndApprove`, check the wrong `owner` for the allowance of `spender` over the tokenIn.