Smart Contract Audits and Findings by eyexploit

Reach out on Twitter @eyexploit for security consulting and private audits.

Audit Competitions

Project	Severity	Contest	Finding
Asymmetry	High	Code4rena	Wrong price calculation for derivative token in WstEth.sol
Asymmetry	Medium	Code4rena	Missing deadline parameter allow pending transaction to be executed maliciously
Asymmetry	Medium	Code4rena	Remaining dust ETH should return to the user after staking
OpenQ	High	Sherlock	Unbounded loop in getLockedFunds could lead to griefing/DOS attack when user try claiming refunds via refundDeposit
OpenQ	High	Sherlock	Malicious oracle can rug pull all the funds held by TieredBounty contracts
Frankencoin	Low	Code4rena	Redundant checks
Cooler	High	Sherlock	Borrower can request a loan without transferring the collateral assets, hence can steal the lender funds
Caviar	High	Code4rena	A early user or attacker can manipulate the LP token prices to take an unfair share of future user's deposits
Papr	Gas	Code4rena	Gas Report
Escher	Medium	Code4rena	Funds can be locked forever for saleReceiver and feeReceiver
Ethos Reserve	QA	Code4rena	QA Report
Popcorn	QA	Code4rena	Report TBA
Ondo Finance	QA	Code4rena	Report TBA

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
README.md		README.md