https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_7.png

solmaxis69

Security Researcher

Contact Me

High

5

Total

Medium

3

Total

$109.00

Total Earnings

#1923 All Time

2x

Payouts

All

Code4rena

Feb '24

AI Arena

AI Arena

66.56 USDC • 5 total findings • Code4rena • solmaxis69

#75

high

Since you can reroll with a different fighterType than the NFT you own, you can reroll bypassing maxRerollsAllowed and reroll attributes based on a different fighterType

high

Player can mint more fighter NFTs during claim of rewards by leveraging reentrancy on the `claimRewards() function `

high

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`

medium

NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)

medium

Can mint NFT with the desired attributes by reverting transaction

Jan '24

Salty.IO

Salty.IO

43.42 USDC • 3 total findings • Code4rena • solmaxis69

#94

high

When borrowers repay USDS, it is sent to the wrong address, allowing anyone to burn Protocol Owned Liquidity and build bad debt for USDS

high

User can evade `liquidation` by depositing the minimum of tokens and gain time to not be liquidated

medium

SALT staker can get extra voting power by simply unstaking their xSALT