Banner
https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/301402e7-c4d4-42b5-b765-928df923480f.jpg

pessimist

Senior Security Researcher

https://github.com/0xpessimist/portfolio

Contact Me

High

5

Total

Medium

12

Total

$25.46K

Total Earnings

#381 All Time

16x

Payouts

bronze

2x

3rd Places

regular

4x

Top 10

regular

9x

Top 25

All

Sherlock

Code4rena

CodeHawks

Jan '25

Plaza Finance

Plaza Finance

1.98 USDC • 1 total finding • Sherlock • pessimist

#92

high

Backrunning `claimFees()` unfairly gives better rates

Aug '24

Fjord Token Staking

Fjord Token Staking

0.19 USDC • 1 total finding • CodeHawks • Ward

#20

medium

[H-01] Auction tokens will be lost forever when auction ends without bids

Tadle

Tadle

0.09 USDC • 3 total findings • CodeHawks • Ward

#153

high

Native token withdrawal fails until manually approved

medium

Unnecessary balance checks and precision issues in TokenManager::_transfer

low

[Low-01] Missing Access Control in `CapitalPool::approve()` Function Allows any User to call it to set Allowance Amount `TokenContract` to `type(uint256).max`.

Jul '24

TraitForge

TraitForge

0 USDC • 1 total finding • Code4rena • Ward

#89

medium

Pause and unpause functions are inaccessible

Optimism Superchain

Optimism Superchain

0 OP • Code4rena • Dup1337

#14

May '24

Canto

Canto

1,563.16 USDC • Code4rena • Dup1337

bronze
Arbitrum BoLD

Arbitrum BoLD

0 USDC • Code4rena • Dup1337

#10

Apr '24

NOYA

NOYA

14.58 USDC + NOYA stars • 3 total findings • Code4rena • Dup1337

#89

medium

`Keepers` does not implement EIP712 correctly on multiple occasions

medium

Using the same heartbeat for multiple price feeds

medium

Dust donation might DOS all connectors to create new holding positions, by preventing removing existing holding positions

Panoptic

Panoptic

828.08 USDC • 1 total finding • Code4rena • Dup1337

#14

medium

`PanopticFactory` uses spot price when deploying new pools, resulting in liquidity manipulation when minting

Mar '24

zkSync Era

zkSync Era

805.96 USDC • 1 total finding • Code4rena • Dup1337

#9

medium

Freezed Chain will never be unfreeze since `StateTransitionManager::unfreezeChain` is calling `freezeDiamond` instead of `unfreezeDiamond`.

Feb '24

Wise Lending

Wise Lending

20,400.36 USDC • 2 total findings • Code4rena • Dup1337

bronze

high

User can erase their position debt for free

medium

Borrowers can DoS liquidations by repaying as little as 1 share.

Jan '24

Salty.IO

Salty.IO

62.25 USDC • 2 total findings • Code4rena • Ward

#84

medium

Chainlink price feed uses BTC, not WBTC. In case of depegging, oracles will become easier to manipulate.

medium

Adversary can prevent updating price feed addresses by creating poisonous proposals ending in `_confirm`

reNFT

reNFT

5.79 USDC • Code4rena • Ward

#64

Dec '23

The Standard

The Standard

0.00 USDC • 1 total finding • CodeHawks • Ward

#105

high

Looping over unbounded `pendingStakes` array can lead to permanent DoS and frozen funds

Revolution Protocol

Revolution Protocol

304.35 USDC • 1 total finding • Code4rena • Ward

#21

high

Malicious delegatees can block delegators from redelegating and from sending their NFTs

Ethereum Credit Guild

Ethereum Credit Guild

1,477.2 USDC • 1 total finding • Code4rena • Ward

#12

medium

No check for sequencer uptime can lead to dutch auctions failing or executing at bad prices