https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_7.png

qmdddd

Security Researcher

Contact Me

High

1

Total

Medium

4

Total

$772.00

Total Earnings

#1303 All Time

2x

Payouts

bronze

1x

3rd Places

regular

1x

Top 10

regular

1x

Top 25

All

Sherlock

Jul '24

MagicSea - the native DEX on the IotaEVM

MagicSea - the native DEX on the IotaEVM

73.29 USDC • 3 total findings • Sherlock • qmdddd

#33

high

The function `vote` does not check if the position is locked for the current vote period.

medium

When `isUnlocked`, the `addToPosition` function will set the position’s lockMultiplier to 0, but at the same time the lockDuration is greater than 0.

medium

Attackers can get rewards immediately by fort-running the transfer rewardToken action.

Jan '24

Covalent

Covalent

699.00 USDC • 2 total findings • Sherlock • qmdddd

bronze

medium

The function `setValidatorAddress` will cause the total amount of the validator's stake to exceed `validatorMaxStake`, thereby violating the protocol.

medium

The coolDown mechanism can be bypassed for some validators