https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/5326d3be-532a-45c7-8714-b35250fddcf1.jpg

slvDev

Security Researcher

πŸ€– Solo Bot Developer | Mastering @code4rena Bot Races | Crafting Code, Chasing Grades πŸš€

Contact Me

High

4

Total

Medium

6

Total

$6.13K

Total Earnings

#824 All Time

36x

Payouts

bronze

1x

3rd Places

regular

5x

Top 10

regular

21x

Top 25

All

Sherlock

Code4rena

Nov '25

Brix Money

Brix Money

47.7 USDC β€’ 1 total finding β€’ Code4rena β€’ slvDev

#8

medium

Cross-chain unstake and fast redeem operations fail due to minAmountLD not accounting for LayerZero dust removal

Oct '25

Reflector V3

Reflector V3

0 USDC β€’ 2 total findings β€’ Code4rena β€’ slvDev

#16

high

`set_invocation_costs_config()` fails to authorize admin allowing anyone to set invocation costs

medium

`twap()` under-charges for multi-period queries due to hardcoded `periods=1`

Jul '24

TraitForge

TraitForge

0.76 USDC β€’ 1 total finding β€’ Code4rena β€’ slvDev

#83

medium

There is no slippage check in the `nuke()` function.

Munchables

Munchables

38.99 USDC β€’ 1 total finding β€’ Code4rena β€’ slvDev

#39

high

Invalid validation in _farmPlots function allowing a malicious user repeated farming without locked funds

Apr '24

NOYA

NOYA

19.18 USDC + NOYA stars β€’ 1 total finding β€’ Code4rena β€’ slvDev

#82

medium

Chainlink connector doesn’t check for the Min / Max prices returned

Oct '23

NextGen

NextGen

0 USDC β€’ 1 total finding β€’ Code4rena β€’ slvDev

#115

high

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Feb '23

Surge

Surge

26.07 USDC β€’ 1 total finding β€’ Sherlock β€’ slvDev

#19

medium

feeRecipient can be set to address(0) if the feeMantissa variable is greater than 0

Dec '22

Escher contest

Escher contest

640.51 USDC β€’ 2 total findings β€’ Code4rena β€’ slvDev

#11

high

`LPDA` price can underflow the price due to bad settings and potentially brick the contract

medium

Unsafe downcasting operation truncate user's input