https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/17920955-4a0d-4547-b17d-b8139af2be85.jpg

roccomania

Security Researcher

Blockchain Security Researcher | Web Developer | Blockchain Developer | Open-Source Freedom Fighter

Contact Me

High

Total

Medium

Total

$18.00

Total Earnings

#2131 All Time

6x

Payouts

2x

Top 10

5x

Top 25

5x

Top 50

All

Sherlock

Code4rena

Mar '25

Nudge.xyz

0.08 USDC • 1 total finding • Code4rena • roccomania

medium

Unauthorized Reallocation in `NudgeCampaign::handleReallocation` and Reward Disruption Vulnerability in `NudgeCampaign::invalidateParticipations`

PinLink: RWA-Tokenized DePIN Marketplace

2.59 USDC • Sherlock • roccomania

#73

Crestal Network

0.01 USDC • 1 total finding • Sherlock • roccomania

#12

high

Unauthorized ERC20 Transfers in `Payment::payWithERC20` can lead to loss of funds

Symmio, Staking and Vesting

0.00 USDC • 1 total finding • Sherlock • roccomania

#18

medium

Lack of Access Control in `SymmStaking::notifyRewardAmount` Allows DoS via Reward Period Extension

Feb '25

Yieldoor

16.24 USDC • 1 total finding • Sherlock • roccomania

#24

medium

The `Leverager::_getTokenIn` does not update the `path` after skip token causing indefinite loop and OOG

Jan '25

Liquid Ron

0.03 USDC • 1 total finding • Code4rena • roccomania

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors