vivekd

Security Researcher

Contact Me

High

Solo

Total

Medium

Solo

Total

$12.61K

Total Earnings

#519 All Time

16x

Payouts

1x

1st Places

2x

3rd Places

10x

Top 10

All

Sherlock

Code4rena

CodeHawks

Hats Finance

Jun '25

dTRINITY

5,500 USDC • 3 total findings • Hats • 0xvd

high

DLoopDepositorBase Transfers User's Leftover Debt Tokens to Vault Instead of User

high

Share Pricing Ignores Debt Leading to Arbitrage Opportunities and Incorrect Vault Valuations

high

Rebalancing Subsidy Exploit for Minor Leverage Deviations

Apr '25

Pareto USP, a credit-backed synthetic dollar

2,166.66 USDC • 1 total finding • Sherlock • vivekd

medium

Inequitable Loss Distribution in Catastrophic Scenarios

Mar '25

Crestal Network

0.01 USDC • 1 total finding • Sherlock • vivekd

#12

high

Unauthorized ERC20 Token Transfer in Payment Contract

Feb '25

THORWallet

0 USDC • 1 total finding • Code4rena • 0xvd

#10

medium

Improper Transfer Restrictions on Non-Bridged Tokens Due to Boolean Bridged Token Tracking, Allowing a DoS Attack Vector

Jan '25

Next Generation

5.37 USDC • 2 total findings • Code4rena • 0xvd

#12

high

Cross-Chain Signature Replay Attack Due to User-Supplied `domainSeparator` and Missing Deadline Check

medium

Lack of deadline check in forwarded request

Liquid Ron

0.03 USDC • 2 total findings • Code4rena • 0xvd

#10

high

The calculation of `totalAssets()` could be wrong if `operatorFeeAmount` > 0, this can cause potential loss for the new depositors

medium

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

IQ AI

552.25 USDC • 2 total findings • Code4rena • 0xvd

medium

Ineffective proposal threshold validation allows setting arbitrary high values

medium

[M-3] Anyone can deploy a new `FraxSwapPair` with a Low fee incurring losses to the protocol

DAOsis

246.2 wROSE • 2 total findings • Hats • 0xvd

medium

Unupdated MaxCap After Token Burn Creates State Inconsistency

low

Fee Addition Instead of Deduction Can Cause Users to Spend More Than Intended

Dec '24

QuantAMM

164.52 op • 2 total findings • CodeHawks • 0xvd

#39

high

Loss of Fees for Router `UpliftOnlyExample` due to Division Rounding in Admin Fee Calculation, Causing Unfair Fee Distribution

medium

quantAMMSwapFeeTake used for both getQuantAMMSwapFeeTake and getQuantAMMUpliftFeeTake.

Alchemix Transmuter

269.42 op • 1 total finding • CodeHawks • 0xvd

#19

medium

Inflated `totalAssets` in `StrategyMainnet`, `StrategyArb`, and `StrategyOp` Contracts

Flex Perpetuals

62.48 USDC • 1 total finding • Code4rena • 0xvd

medium

Missing slippage protection in `AerodromeDexter.sol` `swapExactTokensForTokens()`

Chainlink Payment Abstraction

1,987.07 USDC • Code4rena • 0xvd

Oct '24

Dria

89.27 USDC • 4 total findings • CodeHawks • 0xvd

#17

high

Subtraction in `variance()` will revert due to underflow

high

Potential underflow vulnerability in score range calculation of `LLMOracleCoordinator::finalizeValidation`, leading to DoS.

medium

Platform fees withdrawal will sweep oracle agents earned fees

low

Inconsistent Best Response Selection Due to Missing Tiebreak Mechanism

Aug '24

Proof Of Humanity V2

1,500 USDC • 3 total findings • Hats • 0xvd

high

Insufficient Transfer Cooldown Period in CrossChainProofOfHumanity Contract

low

Incorrect Subcourt ID Assignment Due to Improper _arbitratorExtraData Initialization

low

Incorrect Renewal Period Configuration Allows Premature Renewals

Jul '24

Basin

42.31 USDC • 2 total findings • Code4rena • 0xvd

#10

high

Incorrectly assigned `decimal1` parameter upon decoding

high

`WellUpgradeable` can be upgraded by anyone

TraitForge

22.62 USDC • 3 total findings • Code4rena • 0xvd

#62

medium

There is no slippage check in the `nuke()` function.

medium

Forger Entities can forge more times than intended

medium

Duplicate NFT generation via repeated forging with the same parent