https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_2.png

vivekd

Security Researcher

Contact Me

High

4

Solo

16

Total

Medium

1

Solo

19

Total

$13.01K

Total Earnings

#530 All Time

20x

Payouts

gold

1x

1st Places

bronze

2x

3rd Places

regular

10x

Top 10

All

Sherlock

Code4rena

CodeHawks

Hats Finance

Oct '25

3Jane

3Jane

289.78 USDC • Sherlock • vivekd

#12

Findings not publicly available for private contests.

Sep '25

Super DCA Liquidity Network

Super DCA Liquidity Network

36.19 OP • 5 total findings • Sherlock • vivekd

#23

high

collectFees Reverts On Native-Currency Pools

high

Campaign Start Ignored For Legacy Trades

high

Staking Resets Token Reward Index Without Settling

medium

Mint Rate Updates Retroactively Reprice Rewards

medium

Dormant Emissions Minted To Developer/Pool On First Stake

Ammplify

Ammplify

31.70 USDC • 2 total findings • Sherlock • vivekd

#61

high

Malicious Pool Address Allows Full Maker Deposit Theft

medium

NFT metadata helper calls revert outside diamond storage

Aug '25

USG - Tangent

USG - Tangent

44.41 USDC • 2 total findings • Sherlock • vivekd

#54

medium

WStable share deposit/withdraw math over/under-mints due to wrong ERC4626 conversions

medium

Rewards stream while totalCollateral = 0 lets first depositor capture all prior emissions

Jun '25

dTRINITY

dTRINITY

5,500 USDC • 3 total findings • Hats • 0xvd

bronze

high

DLoopDepositorBase Transfers User's Leftover Debt Tokens to Vault Instead of User

high

Share Pricing Ignores Debt Leading to Arbitrage Opportunities and Incorrect Vault Valuations

high

Rebalancing Subsidy Exploit for Minor Leverage Deviations

Apr '25

Pareto USP, a credit-backed synthetic dollar

Pareto USP, a credit-backed synthetic dollar

2,166.66 USDC • 1 total finding • Sherlock • vivekd

gold

medium

Inequitable Loss Distribution in Catastrophic Scenarios

Mar '25

Crestal Network

Crestal Network

0.01 USDC • 1 total finding • Sherlock • vivekd

#12

high

Unauthorized ERC20 Token Transfer in Payment Contract

Feb '25

THORWallet

THORWallet

0 USDC • 1 total finding • Code4rena • 0xvd

#10

medium

Improper Transfer Restrictions on Non-Bridged Tokens Due to Boolean Bridged Token Tracking, Allowing a DoS Attack Vector

Jan '25

Next Generation

Next Generation

5.37 USDC • 2 total findings • Code4rena • 0xvd

#12

high

Cross-Chain Signature Replay Attack Due to User-Supplied `domainSeparator` and Missing Deadline Check

medium

Lack of deadline check in forwarded request

Liquid Ron

Liquid Ron

0.03 USDC • 2 total findings • Code4rena • 0xvd

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

medium

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

IQ AI

IQ AI

552.25 USDC • 2 total findings • Code4rena • 0xvd

#9

medium

Ineffective proposal threshold validation allows setting arbitrary high values

medium

[M-3] Anyone can deploy a new `FraxSwapPair` with a Low fee incurring losses to the protocol

DAOsis

DAOsis

246.2 wROSE • 2 total findings • Hats • 0xvd

#7

medium

Unupdated MaxCap After Token Burn Creates State Inconsistency

low

Fee Addition Instead of Deduction Can Cause Users to Spend More Than Intended

Dec '24

QuantAMM

QuantAMM

164.52 op • 2 total findings • CodeHawks • 0xvd

#39

high

Loss of Fees for Router `UpliftOnlyExample` due to Division Rounding in Admin Fee Calculation, Causing Unfair Fee Distribution

medium

quantAMMSwapFeeTake used for both getQuantAMMSwapFeeTake and getQuantAMMUpliftFeeTake.

Alchemix Transmuter

Alchemix Transmuter

269.42 op • 1 total finding • CodeHawks • 0xvd

#19

medium

Inflated `totalAssets` in `StrategyMainnet`, `StrategyArb`, and `StrategyOp` Contracts

Flex Perpetuals

Flex Perpetuals

62.48 USDC • 1 total finding • Code4rena • 0xvd

#4

medium

Missing slippage protection in `AerodromeDexter.sol` `swapExactTokensForTokens()`

Chainlink Payment Abstraction

Chainlink Payment Abstraction

1,987.07 USDC • Code4rena • 0xvd

bronze

Oct '24

Dria

Dria

89.27 USDC • 4 total findings • CodeHawks • 0xvd

#17

high

Subtraction in `variance()` will revert due to underflow

high

Potential underflow vulnerability in score range calculation of `LLMOracleCoordinator::finalizeValidation`, leading to DoS.

medium

Platform fees withdrawal will sweep oracle agents earned fees

low

Inconsistent Best Response Selection Due to Missing Tiebreak Mechanism

Aug '24

Proof Of Humanity V2

Proof Of Humanity V2

1,500 USDC • 3 total findings • Hats • 0xvd

#4

high

Insufficient Transfer Cooldown Period in CrossChainProofOfHumanity Contract

low

Incorrect Subcourt ID Assignment Due to Improper _arbitratorExtraData Initialization

low

Incorrect Renewal Period Configuration Allows Premature Renewals

Jul '24

Basin

Basin

42.31 USDC • 2 total findings • Code4rena • 0xvd

#10

high

Incorrectly assigned `decimal1` parameter upon decoding

high

`WellUpgradeable` can be upgraded by anyone

TraitForge

TraitForge

22.62 USDC • 3 total findings • Code4rena • 0xvd

#62

medium

There is no slippage check in the `nuke()` function.

medium

Forger Entities can forge more times than intended

medium

Duplicate NFT generation via repeated forging with the same parent