https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_9.png

touristS

Security Researcher

Contact Me

High

1

Total

Medium

9

Total

$542.00

Total Earnings

#1625 All Time

4x

Payouts

bronze

1x

3rd Places

regular

2x

Top 10

regular

3x

Top 25

All

Sherlock

Nov '25

stNXM by EaseDeFi

stNXM by EaseDeFi

0.26 USDC • 1 total finding • Sherlock • touristS

#51

medium

Incorrect APY check causes Oracle reverts immediately after deployment

Inverse Finance - Junior Tranche

Inverse Finance - Junior Tranche

12.54 USDC • 1 total finding • Sherlock • touristS

bronze

medium

The maxDeposit returns uint256.max despite hard deposit limits (EIP-4626 Violation)

Sep '25

Summer.fi - governance v2

Summer.fi - governance v2

9.82 USDC • 1 total finding • Sherlock • touristS

#8

medium

Malicious users can prevent reward accumulation for all stakers by frequent `updateReward` call

Jul '25

Notional Exponent

Notional Exponent

520.34 USDC • 7 total findings • Sherlock • touristS

#13

high

Missing Slippage Check in `PendlePTStrategy` Can Lead to Sandwich Attacks

medium

Migration will Reverts Due to Rounding Mismatch in Borrow Repayment

medium

Incorrect asset matching for ETH/WETH leads to potential DoS of exitPosition in CurveConvexStrategy

medium

Incorrect WithdrawRequestManager Lookup for ETH Token Causes Withdrawal Failure

medium

Reward Loss During `migrateRewardPool` Due to `forceClaimAfter` Lock

medium

Ethena Withdraw request can finalize with 0 token silently if `cooldownDuration == 0`

medium

Missing Reward Manager When Using `CURVE_GAUGE` Directly in CurveConvex Strategy