https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/fbebee08-ee0f-4779-8ada-ffcc652d4365.jpg

tmotfl

Security Researcher

Contact Me

High

6

Total

Medium

6

Total

$1.01K

Total Earnings

#1228 All Time

10x

Payouts

silver

1x

2nd Places

regular

1x

Top 10

regular

6x

Top 25

All

Sherlock

CodeHawks

Dec '24

Tally ARB Staker

Tally ARB Staker

174.52 USDC • Sherlock • tmotfl

#16

Oku's New Order Types Contract Contest

Oku's New Order Types Contract Contest

0.02 OP • 2 total findings • Sherlock • tmotfl

#64

high

Potential hash collisions may lead to user fund losses

medium

The check of stale price in `PythOracle.sol` is incorrect

Nov '24

Ethos Network Financial Contracts

Ethos Network Financial Contracts

74.96 USDC • 3 total findings • Sherlock • tmotfl

#23

high

Double counting of protocol and donation fees leads to potential protocol drain

high

ReputationMarket charges an excessive protocol fee due to not excluding the refund amount

medium

Lack of slippage protection in sellVotes

Nouns DAO - Auction Streams

Nouns DAO - Auction Streams

94.20 USDC • Sherlock • tmotfl

#29

Debita Finance V3

Debita Finance V3

284.95 USDC • 2 total findings • Sherlock • tmotfl

#18

high

auction doesn't support TaxTokenReceipts, leading to the lender losing funds

medium

updateFunds may miss some whiteListedPair due to incorrect use of `return`

Telcoin Update #2

Telcoin Update #2

21.56 USDC • Sherlock • tmotfl

#34

Oct '24

Dria

Dria

38.13 USDC • 2 total findings • CodeHawks • tmotfl

#34

high

Subtraction in `variance()` will revert due to underflow

high

Potential underflow vulnerability in score range calculation of `LLMOracleCoordinator::finalizeValidation`, leading to DoS.

Gamma Brevis Rewarder

Gamma Brevis Rewarder

314.34 OP • 1 total finding • Sherlock • tmotfl

silver

medium

potential funds locked due to precsion loss and flawed design

Sep '24

Boost Core Incentive Protocol

Boost Core Incentive Protocol

9.11 USDC • 1 total finding • Sherlock • tmotfl

#23

medium

`allocate` in ManageBudget.sol does not work with fee on transfer token

Aug '24

Cork Protocol

Cork Protocol

3.41 USDC • 1 total finding • Sherlock • tmotfl

#17

medium

The modifier LVDepositNotPaused is implemented incorrectly