https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/5326d3be-532a-45c7-8714-b35250fddcf1.jpg

slvDev

Security Researcher

🤖 Solo Bot Developer | Mastering @code4rena Bot Races | Crafting Code, Chasing Grades 🚀

Contact Me

High

Total

Medium

Total

$9.86K

Total Earnings

#676 All Time

42x

Payouts

1x

1st Places

1x

3rd Places

9x

Top 10

All

Sherlock

Code4rena

Cantina

Apr '26

Clear Macro by Superfluid

7.30 USDC • Sherlock • slvDev

#74

LayerZero - Stellar endpoint

1,771.58 USDC • Code4rena • slvDev

Mar '26

Chainlink Payment Abstraction V2

93.98 USDC • 1 total finding • Code4rena • slvDev

medium

Finding not yet public.

Dec '25

Panoptic: Next Core

14.79 USDC • 1 total finding • Code4rena • slvDev

#31

medium

Incorrect `UPPER_118BITS_MASK` Mask in `OraclePackLibrary` Causes Unexpected Clearing of `EMAs` and `lockMode` in `OraclePack`

Rujira

701.05 USDC • 1 total finding • Code4rena • slvDev

#10

high

Finding not yet public.

Nov '25

Brix Money

47.7 USDC • 1 total finding • Code4rena • slvDev

medium

Cross-chain unstake and fast redeem operations fail due to minAmountLD not accounting for LayerZero dust removal

SukukFi

1,140.12 USDC • 1 total finding • Code4rena • slvDev

medium

`fulfillRedeem` may corrupt share price and allow over-redemption of assets

Merkl

284.21 USDC • Code4rena • slvDev

Swafe

11.87 USDC • 1 total finding • Code4rena • slvDev

#26

medium

Marking a backup makes recovery impossible (recover list never queried)

Oct '25

Reflector V3

0 USDC • 2 total findings • Code4rena • slvDev

#16

high

`set_invocation_costs_config()` fails to authorize admin allowing anyone to set invocation costs

medium

`twap()` under-charges for multi-period queries due to hardcoded `periods=1`

Sep '24

uniswap-v4

242.88 USDC • Cantina • slvDev

#53

Jul '24

TraitForge

0.76 USDC • 1 total finding • Code4rena • slvDev

#83

medium

There is no slippage check in the `nuke()` function.

Munchables

38.99 USDC • 1 total finding • Code4rena • slvDev

#38

high

Invalid validation in _farmPlots function allowing a malicious user repeated farming without locked funds

Jun '24

Thorchain

0 USDC • Code4rena • slvDev

#19

May '24

Euler-v2

1,069 USDC • Cantina • slvDev

#30

Arbitrum BoLD

0 USDC • Code4rena • slvDev

#10

LoopFi

0 USDC • Code4rena • slvDev

#10

Apr '24

NOYA

19.18 USDC + NOYA stars • 1 total finding • Code4rena • slvDev

#81

medium

Chainlink connector doesn’t check for the Min / Max prices returned

Panoptic

212.89 USDC • Code4rena • slvDev

#16

Mar '24

Ondo Finance

8.28 USDC • Code4rena • slvDev

#17

Smart-contracts

375 USDC • Cantina • slvDev

#21

DittoETH

191.73 USDC • Code4rena • slvDev

#18

Smart Wallet

13.69 USDC • Code4rena • slvDev

#18

Abracadabra Mimswap

214.67 USDC • Code4rena • slvDev

#16

zkSync Era

619.88 USDC • Code4rena • slvDev

#10

Taiko

221.41 USDC • Code4rena • slvDev

#26

PoolTogether

378.99 USDC • Code4rena • slvDev

#13

Jan '24

Decent

204.24 USDC • Code4rena • slvDev

#25

Salty.IO

32.48 USDC • Code4rena • slvDev

#98

Curves

65.09 USDC • Code4rena • slvDev

#54

reNFT

301.62 USDC • Code4rena • slvDev

#30

Dec '23

Olas

271.14 USDC • Code4rena • slvDev

#16

Oct '23

NextGen

0 USDC • 1 total finding • Code4rena • slvDev

#111

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Apr '23

Frankencoin

43.63 USDC • Code4rena • slvDev

#60

Mar '23

Gitcoin

24.42 USDC • Sherlock • slvDev

#60

Asymmetry contest

42.06 USDC • Code4rena • slvDev

#83

Canto Identity Subprotocols contest

189.27 USDC • Code4rena • slvDev

#16

Neo Tokyo contest

48.97 USDC • Code4rena • slvDev

#20

Wenwin contest

34.42 USDC • Code4rena • slvDev

#25

Feb '23

Surge

26.07 USDC • 1 total finding • Sherlock • slvDev

#19

medium

feeRecipient can be set to address(0) if the feeMantissa variable is greater than 0

Jan '23

Astaria contest

253.34 USDC • Code4rena • slvDev

#40

Dec '22

Escher contest

640.51 USDC • 2 total findings • Code4rena • slvDev

#11

high

`LPDA` price can underflow the price due to bad settings and potentially brick the contract

medium

Unsafe downcasting operation truncate user's input