Security Researcher
High
Total
Medium
Total Earnings
#1302 All Time
Payouts
Top 10
Top 25
Top 50
All
Sherlock
Code4rena
Feb '24
255.08 USDC • 1 total finding • Sherlock • tank
#6
medium
The `_update()` function results in the indefinite locking of users' funds.
Sep '23
0.11 USDC • 1 total finding • Code4rena • tank
#62
high
All tokens can be stolen from `VirtualAccount` due to missing access modifier
Aug '23
6.87 USDC • Code4rena • tank
#81
Jul '23
0 USDC • 2 total findings • Code4rena • tank
#92
`LidoEthStrategy._currentBalance` is subject to price manipulation, allows overborrowing and liquidations
all deposit and withdraw function in Convex and Curve nativeLP Strategy, apply slippage on internal pricing; which call real-time on chain price from Curve directly and subject to MEV
Jun '23
517.20 USDC • 1 total finding • Sherlock • tank
fee calculations
Mar '23
10.93 USDC • 1 total finding • Code4rena • tank
#114
Staking, unstaking and rebalanceToWeight can be sandwiched (Mainly rETH deposit )