https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_5.png

orion

Security Researcher

Contact Me

High

5

Total

Medium

3

Total

$1.04K

Total Earnings

#1291 All Time

12x

Payouts

regular

1x

Top 10

regular

2x

Top 25

regular

5x

Top 50

All

Code4rena

Oct '23

NextGen

NextGen

0 USDC • 1 total finding • Code4rena • orion

#115

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Canto Liquidity Mining Protocol

Canto Liquidity Mining Protocol

4.94 USDC • Code4rena • orion

#19

Sep '23

Venus Prime

Venus Prime

4.37 USDC • Code4rena • orion

#39

Maia DAO - Ulysses

Maia DAO - Ulysses

11.58 USDC • 1 total finding • Code4rena • orion

#59

high

All tokens can be stolen from `VirtualAccount` due to missing access modifier

Apr '23

Rubicon v2

Rubicon v2

29.73 USDC • 1 total finding • Code4rena • orion

#90

high

An attacker can steal all tokens of users that use `FeeWrapper`

Jan '23

Popcorn contest

Popcorn contest

4.61 USDC • 1 total finding • Code4rena • orion

#88

high

Staking rewards can be drained

Biconomy - Smart Contract Wallet contest

Biconomy - Smart Contract Wallet contest

149.42 USDC • 1 total finding • Code4rena • orion

#40

high

Replay attack (EIP712 signed transaction)

Dec '22

Forgeries contest

Forgeries contest

553.32 USDC • 1 total finding • Code4rena • orion

#8

medium

Raffle creator can rug participants

Tigris Trade contest

Tigris Trade contest

32.2 USDC • 2 total findings • Code4rena • orion

#57

medium

Bypass the delay security check to win risk free funds

medium

Centralization risks: owner can freeze withdraws and use timelock to steal all funds

May '22

Velodrome Finance contest

Velodrome Finance contest

49.95 USDC • Code4rena • orion

#57

Aura Finance contest

Aura Finance contest

83.25 USDC • Code4rena • orion

#52

Cudos contest

Cudos contest

118.73 USDC • Code4rena • orion

#39