https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/974e8f45-8154-4f6a-abe6-fb7b9ba50a09.png

tusharr1411

Security Researcher

High

3

Total

Medium

3

Total

6x

Payouts

bronze

1x

3rd Places

regular

2x

Top 10

regular

2x

Top 25

All

Sherlock

Code4rena

Mar '25

Nudge.xyz

Nudge.xyz

0.06 USDC • 1 total finding • Code4rena • tusharr1411

#8

medium

Unauthorized Reallocation in `NudgeCampaign::handleReallocation` and Reward Disruption Vulnerability in `NudgeCampaign::invalidateParticipations`

PinLink: RWA-Tokenized DePIN Marketplace

PinLink: RWA-Tokenized DePIN Marketplace

0.01 USDC • Sherlock • tusharr1411

#100

Feb '25

Rova

Rova

0.04 USDC • 1 total finding • Sherlock • tusharr1411

bronze

medium

Incorrect tokens check in `updateParticipation` function leads to DoS of this function or incorrect userToken allocation.

Jan '25

Plaza Finance

Plaza Finance

0.18 USDC • 1 total finding • Sherlock • tusharr1411

#100

high

`Pool.sol::transferReserveToAuction()` function incorrectly accesses `auctionAddress`, causing the `Auction::endAuction()` function to always fail to `SUCCEEDED` the auction, thus locking bidders' coupon tokens permanently in the auction contract.

Dec '24

SecondSwap

SecondSwap

0.38 USDC • 2 total findings • Code4rena • tusharr1411

#65

high

Users can claim more that their actual allotment

medium

Incorrect listing type validation bypasses enforcement of minimum purchase amount

Lambo.win

Lambo.win

0 USDC • 1 total finding • Code4rena • tusharr1411

#36

high

Minting zero tokens when underlyingToken is not Ether in cashIn()