https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_0.png

s1ce

Security Researcher

Contact Me

High

8

Total

Medium

8

Total

$7.33K

Total Earnings

#662 All Time

6x

Payouts

gold

1x

1st Places

silver

2x

2nd Places

regular

6x

Top 10

All

Sherlock

Oct '24

AXION

AXION

1,307.48 USDC • 3 total findings • Sherlock • s1ce

#4

high

`_unfarmBuyBurn` function in `V3AMO` has wrong preconditions

high

`_addLiquidity` in `V3AMO` calculates liquidity incorrectly

medium

Precision loss in `boostPrice` in `V3AMO`

Apr '24

xKeeper

xKeeper

831.96 USDC • 1 total finding • Sherlock • s1ce

silver

medium

OpenRelay payment doesn't include L1 Data fees

Mar '24

Zap Protocol

Zap Protocol

2,895.74 USDC • 6 total findings • Sherlock • s1ce

gold

high

Inconsistency with tax calculation and refunds

high

`left > 0` check inside `claim` in `TokenSale.sol` leads to unexpected consequences

high

Reentrancy allows attacker to drain contract through repeated calls through `claim` in `Vesting.sol`

medium

`calculateMaxAllocation` computes max allocation incorrectly

medium

`admin.blockClaim` is used incorrectly

medium

`updateUserDeposit` function in `Vesting.sol` doesnt work for ETH

Jan '24

Olympus On-Chain Governance

Olympus On-Chain Governance

139.35 USDC • 1 total finding • Sherlock • s1ce

#7

medium

Voting will revert because of incorrect use of getPriorVotes

LooksRare YOLO

LooksRare YOLO

104.78 USDC • 2 total findings • Sherlock • s1ce

#5

high

Zero entries in `depositETHIntoMultipleRounds` allows for malicious exploiter to profit

medium

_depositETH does not check against MAXIMUM_NUMBER_OF_DEPOSITS_PER_ROUND

Truflation

Truflation

2,051.68 USDC • 3 total findings • Sherlock • s1ce

silver

high

Initial release amount in `claimable` function has no checks, and can be claimed as many times as the exploiter wishes

high

`cancelVesting` will potentially not give users unclaimed, vested funds, even if giveUnclaimed = true

medium

`migrateUser` will lead to loss of user staking rewards