https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/5dfd0338-d85e-45ac-ae61-fddd979ac0b2.jpeg

rubencrxz

Security Researcher

Spanish Smart Contract Security Auditor with a Psychology degree. Using human superpowers to secure code.🧠🛡️

High

Total

Medium

Total

$233.00

Total Earnings

#2037 All Time

10x

Payouts

1x

Top 10

3x

Top 25

7x

Top 50

All

Sherlock

Code4rena

Cantina

Jun '26

DRE App - dreUSD

0.68 USDC • Sherlock • rubencrxz

#182

Apr '26

K2

201.58 USDC • 4 total findings • Code4rena • rubencrxz

#40

high

`internal_liquidation_call` validates close factor before `min_remaining_debt` bump, allowing liquidators to seize 100% of debt when only 50% is permitted

medium

Inactive collateral remains counted for new borrowing while liquidation and withdrawal reject the same reserve as `AssetNotActive`

medium

Prepared Flash Liquidation Can Bypass Collateral Reserve Pause

medium

Reserve deficit is excluded from borrow-cap and debt-ceiling checks, allowing new borrows above configured risk limits

Mar '26

Chainlink Payment Abstraction V2

0 USDC • 1 total finding • Code4rena • rubencrxz

#11

medium

Finding not yet public.

Current Finance

0.07 USDC • 2 total findings • Sherlock • rubencrxz

#31

high

Liquidation Eligibility Uses EMA While Seized Collateral Uses Spot

medium

Deposit Cap Bypass Via Double Subtraction of `cash_reserve`

Jan '26

OpenCover Insured Vaults

3.40 USDC • Sherlock • rubencrxz

#104

Dec '25

Monolith Stablecoin Factory

1.62 USDC • 1 total finding • Sherlock • rubencrxz

#26

medium

Interest Undercharged when Borrow Rate Decays past MIN_RATE Due to Unit Mismatch in Integral Calculation

Nov '25

SukukFi

0 USDC • 1 total finding • Code4rena • rubencrxz

high

Missing access control in `WERC7575Vault` allows unauthorized withdrawals

Oct '25

Reflector V3

0 USDC • 1 total finding • Code4rena • rubencrxz

#16

high

`set_invocation_costs_config()` fails to authorize admin allowing anyone to set invocation costs

Avon-Contracts

0.02 USDC • 1 total finding • Cantina • rubencrxz

#39

medium

Finding not yet public.

Sep '25

Ammplify

26.00 USDC • 2 total findings • Sherlock • rubencrxz

#64

medium

Admin.sol::transferVaultBalance Function is Hardcoded to Non-Existent User ID, Breaking Vault Migration

medium

[M-01] View.sol::queryAssetBalances Provides Inaccurate Information Potentially Leading to State-Changing Actions Under False Assumptions