Security Researcher
Honorable knight securing Camelot
High
Total
Medium
Total Earnings
#228 All Time
Payouts
3rd Places
Top 10
Top 25
All
Sherlock
Code4rena
Sep '22
774.97 USDC • 1 total finding • Sherlock • sirhashalot
#5
medium
Loss of funds with high liquidExitPenalty
306.49 USDC • 2 total findings • Sherlock • sirhashalot
#6
Casting overflow can cause locked funds
ECDSA Signature Malleability
May '22
474.36 USDC • Code4rena • sirhashalot
#39
Mar '22
2,135.11 USDT • 1 total finding • Code4rena • sirhashalot
#8
Frontrunning of setPerTokenWalletCap edge case
Feb '22
75.57 USDC • Code4rena • sirhashalot
#19
1,218.58 USDC • 2 total findings • Code4rena • sirhashalot
#11
Seven ways in which the Owner and Proxy Admin can make users lose funds ("rug vectors")
[WP-H3] `saleRecipient` can rug buyers
Jan '22
1,045.22 USDC • 1 total finding • Code4rena • sirhashalot
Oracle data feed is insufficiently validated.
426.35 USDC • 1 total finding • Code4rena • sirhashalot
#16
Usage of deprecated ChainLink API in `EIP1271Wallet`
362.8 USDT • Code4rena • sirhashalot
#13
7,867.47 USDC • 1 total finding • Code4rena • sirhashalot
#4
high
Flash loan price manipulation in `purchasePyroFlan()`
2,357.4 USDT • 3 total findings • Code4rena • sirhashalot
Use safeTransfer/safeTransferFrom consistently instead of transfer/transferFrom
`createPair()` expects zero slippage
Failed transfer with low level call could be overlooked
3,128.52 USDC • Code4rena • sirhashalot
13.86 USDC • Code4rena • sirhashalot
#21
1,750 tokens) • Code4rena • sirhashalot
#9
4,614.61 tokens) • 1 total finding • Code4rena • sirhashalot
Tokens can be burned with no access control
1,413.46 USDC • 1 total finding • Code4rena • sirhashalot
#14
no use of safeMint() as safe guard for users
1,026.51 USDC • 1 total finding • Code4rena • sirhashalot
`_safeMint` Will Fail Due To An Edge Case In Calculating `tokenId` Using The `_generateNewTokenId` Function
7,476.43 USDC • 4 total findings • Code4rena • sirhashalot
`burn()` doesn't call ERC721 `_burn()`
safeDecimals can revert causing DoS
`safeName()` can revert causing DoS
`safeSymbol()` can revert causing DoS
Dec '21
65.28 USDC • Code4rena • sirhashalot
#23
1,323.39 USDC • 2 total findings • Code4rena • sirhashalot
Return variable can remain unassigned in _sendForReceiver
transfer return value is ignored
76.03 USDC • Code4rena • sirhashalot
#25
1,014.14 USDC • 1 total finding • Code4rena • sirhashalot
#12
Missing approve(0)
1,005.4 USDC • 2 total findings • Code4rena • sirhashalot
#7
Rewards can be claimed multiple times
Unsafe uint64 casting may overflow
2.45 ETH • Code4rena • sirhashalot
#20
