https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_7.png

scammed

Security Researcher

Contact Me

High

4

Total

Medium

6

Total

$2.02K

Total Earnings

#987 All Time

2x

Payouts

regular

2x

Top 10

regular

2x

Top 25

regular

2x

Top 50

All

Sherlock

Jul '24

MagicSea - the native DEX on the IotaEVM

MagicSea - the native DEX on the IotaEVM

1,254.87 USDC • 9 total findings • Sherlock • scammed

#9

high

Voter::vote will be always reverting in case BribeRewarder is registered

high

BribeRewarder unclaimed tokens remain locked due to missing functionality

high

Users retain their voting power even when their lock expires

high

Users cannot claim bribe rewards 2 periods after _lastVotingPeriod

medium

Malicious user can deploy 5 BribeRewarders for uint max periods of given pool

medium

MlumStaking user can frontrun new reward tokens and harvest immediatelly

medium

Anyone can call addToPosition

medium

Reward tokens without decimals cannot be used

medium

harvestPositionsTo cannot be used as intended

Jun '24

Mellow Modular LRTs

Mellow Modular LRTs

768.70 USDC • 1 total finding • Sherlock • scammed

#5

medium

ChainlinkOracle assumes 1:1 ratio for stETH/ETH