touristS

Security Researcher

Contact Me

High

Total

Medium

Total

$1.97K

Total Earnings

#1186 All Time

5x

Payouts

1x

3rd Places

3x

Top 10

4x

Top 25

All

Sherlock

Code4rena

Nov '25

stNXM by EaseDeFi

0.26 USDC • 1 total finding • Sherlock • touristS

#51

medium

Incorrect APY check causes Oracle reverts immediately after deployment

Inverse Finance - Junior Tranche

12.54 USDC • 1 total finding • Sherlock • touristS

medium

The maxDeposit returns uint256.max despite hard deposit limits (EIP-4626 Violation)

Megapot

1,422.87 USDC • 4 total findings • Code4rena • touristS

high

Unoptimized subset matches counting implementation will exceed tx gas limit on base chain

medium

Changing Payout Calculator During Active Drawing Causes Loss of Unclaimed Winnings

medium

Global Variable Manipulation During Active Draw Alters End Result

medium

If bonus ball max equals normal ball max then ticket buyers gain excessive edge

Sep '25

Summer.fi - governance v2

9.82 USDC • 1 total finding • Sherlock • touristS

medium

Malicious users can prevent reward accumulation for all stakers by frequent `updateReward` call

Jul '25

Notional Exponent

520.34 USDC • 7 total findings • Sherlock • touristS

#13

high

Missing Slippage Check in `PendlePTStrategy` Can Lead to Sandwich Attacks

medium

Migration will Reverts Due to Rounding Mismatch in Borrow Repayment

medium

Incorrect asset matching for ETH/WETH leads to potential DoS of exitPosition in CurveConvexStrategy

medium

Incorrect WithdrawRequestManager Lookup for ETH Token Causes Withdrawal Failure

medium

Reward Loss During `migrateRewardPool` Due to `forceClaimAfter` Lock

medium

Ethena Withdraw request can finalize with 0 token silently if `cooldownDuration == 0`

medium

Missing Reward Manager When Using `CURVE_GAUGE` Directly in CurveConvex Strategy