https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/73dd4187-ffda-4986-ad97-b0c8105d300c.png

vard

Security Researcher

@algizsec

Contact Me

High

Total

Medium

Total

$3.68K

Total Earnings

#987 All Time

14x

Payouts

1x

1st Places

1x

3rd Places

4x

Top 10

All

Sherlock

Immunefi

Dec '25

Monolith Stablecoin Factory

22.23 USDC • 3 total findings • Sherlock • algiz

#21

medium

Interest accrual can be skipped after extended market inactivity, allowing borrowers to avoid interest payments

medium

Unit mismatch in `calculateInterest()` undercharges interest when borrow rate decays to `MIN_RATE`

medium

Boundary condition mismatch allows liquidation of solvent positions at exact borrowing capacity

Nov '25

stNXM by EaseDeFi

0.51 USDC • 1 total finding • Sherlock • algiz

#49

medium

Duplicate tranche accounting enables owner to steal funds

Inverse Finance - Junior Tranche

12.54 USDC • 1 total finding • Sherlock • algiz

medium

EIP-4626 compliance violation: maxDeposit() and maxMint() do not reflect actual vault capacity limits

Oct '25

Audit Comp | Alchemix V3

1,443 USDC • 2 total findings • Immunefi • algizsec

#19

high

Finding not yet public.

high

Finding not yet public.

Audit Comp | Alchemix V3

211 USDC • 3 total findings • Immunefi • algiz

#44

high

Finding not yet public.

high

Finding not yet public.

low

Finding not yet public.

3Jane

313.04 USDC • Sherlock • algiz

#11

Findings not publicly available for private contests.

Sep '25

Super DCA Liquidity Network

0.00 OP • 1 total finding • Sherlock • algiz

#52

high

SuperDCAStaking.stake() / unstake() updates lastRewardIndex without delta being ever minted

Rezerve Money

29.81 USDC • Sherlock • algiz

#72

Findings not publicly available for private contests.

Aug '25

USG - Tangent

94.65 USDC • 2 total findings • Sherlock • algiz

#47

medium

Incorrect assumption that one Pendle PT is redeemable for one underlying token

medium

Zap deposits using fee-on-transfer tokens will fail

Neutrl Protocol

941.02 USDC • 1 total finding • Sherlock • algiz

medium

Fully-restricted users can stake using different receiver address

Jul '25

Mellow Flexible Vaults

142.23 USDC • 3 total findings • Sherlock • algiz

#31

high

Incorrect decrement of latestEligibleIndex in handleReport() skips allocating shares for borderline deposits, but they remain claimable

medium

cancelDepositRequest() always reverts due to modifying FenwickTree with wrong index

medium

UpdateChecks() reverts when hasTransferWhitelist and info[from].canTransfer, preventing transfers of shares between EOA

Jun '25

Superfluid Locker System

451.00 USDC • 1 total finding • Sherlock • algiz

medium

FluidLocker.lock() & provideLiquidity() breach the “initial-phase distribution” invariant

May '25

LEND

14.11 USDC • 4 total findings • Sherlock • algiz

#81

high

Subsequent Cross‐Chain Borrows don’t Accrue interest on existing principal when borrowing the same Asset

high

First-borrow collateral check bypass in CoreRouter.borrow() allows attacker to steal funds

high

Repeated claimLend calls drain all LEND because lendAccrued is not reset

high

Wrong check in borrowWithInterest() allows users to borrow more then they supplied

LayerEdge - Staking

7.19 USDC • 1 total finding • Sherlock • algiz

medium

Unbounded loops over userTierHistory allows history-flood DOS on Tier-boundary users