Audix_hq @Audix_hq
Audix strengthens your security assessment workflow by analyzing smart contract code to identify heuristics and invariants linktr.ee/audix_hq Joined December 2024-
Tweets125
-
Followers350
-
Following1
-
Likes32
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ต๐ฏ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Napier | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-02 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 5,074 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Attackers can inflate the maximum scale by depositing minimal shares then transferring large assetsโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ต๐ฎ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Merit Circle | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 3,385 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Extending lock duration burns existing shares and recalculates them based on remaining time ratherโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ต๐ญ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Olympus Update | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 2,360 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: The vault's mitigation against oracle-pool price mismatches can be bypassed by sandwiching oracleโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ต๐ฌ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Optimism | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-03 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 137,919 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Attackers can exploit failed message retries and reentrancy guards to hijack victim withdrawals byโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ต ๐ ๐๐ผ๐ป๐๐ฒ๐๐: smilee finance | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 14,554 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: A bounds check for delta hedge amounts incorrectly uses absolute values but always sets positiveโฆ
๐ Contest Bug Digest - PT 88๐ Contest: Perennial V2 update | @sherlockdefi Finding ID:ย H-03 Dup: 0 Payout:ย 4,239 Bug Summary: Attackers can execute trades through Intent orders, withdraw all collateral before fees are applied, then later claim referral fees from the systemโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ณ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Optimism | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 137,919 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Gas sufficiency checks occur before the actual call execution, allowing attackers to triggerโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ฒ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Anja | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-03 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 4,967 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Anyone can call addCollateral to deposit CryptoPunks NFTs offered for sale, allowing attackers to frontrunโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ฑ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Blueberry Update | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-04 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 2,209 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Users lose rewards at cliff transitions because pending reward calculations use current emissionโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ฐ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Tokemak | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-08 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 12,840 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Destination vaults incorrectly appear profitable after rebalancing because debt basis updates to currentโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ฏ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Yearn y-bold | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 3,152 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Attackers can inflate share prices by donating assets and exploiting rounding errors, stealing upโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ฎ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Arcadia | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 14,083 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Accounts can own themselves and use malicious creditors to extract ERC721 assets via flash actions whileโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ญ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Notional | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-02 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 4,953 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: The function returns unwrapped stETH amounts as if they were wrapped stETH amounts and fails to actuallyโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ด๐ฌ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Notional | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-05 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 11,008 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: The contract overwrites dynamic slippage parameters with a fixed pool slippage limit, potentiallyโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ณ๐ต ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Illuminate | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-03 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 1,453 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: The redeem function compares amounts with different decimal places (Sense PT vs underlying token),โฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ณ๐ด ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Isomorph | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-03 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 5,224 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: When Lyra LP tokens are used as collateral and transferred to the vault, users lose access to their OPโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ณ๐ณ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Optimism | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-01 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 137,919 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: The contract checks gas availability before spending gas on operations, allowing attackers to causeโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ณ๐ฒ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Union Finance | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-03 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 2,439 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Stakers can manipulate reward calculations by timing withdrawals to avoid bad debt penalties,โฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ณ๐ฑ ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Blueberry | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-07 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 5,645 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: The system calculates liquidation risk using the original deposit amount instead of the current balanceโฆ
๐ ๐๐ผ๐ป๐๐ฒ๐๐ ๐๐๐ด ๐๐ถ๐ด๐ฒ๐๐ - ๐ฃ๐ง๐ณ๐ฐ๐ ๐๐ผ๐ป๐๐ฒ๐๐: Carapace | @sherlockdefi ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐: H-10 ๐๐๐ฝ: 0 ๐ฃ๐ฎ๐๐ผ๐๐: 2,646 ๐๐๐ด ๐ฆ๐๐บ๐บ๐ฎ๐ฟ๐: Missing validation allows lastClaimedSnapshotId to reset to zero when no claimable amount exists,โฆ
Asukarelsa @Asukarelsa
287 Followers 885 Following Deep into that darkness peering, long I stood there wondering, fearing, doubting, dreaming
0xMujahid @muja002
123 Followers 176 Following Solidity Backend Engineer @P2Pdotme || Web3 Research Analyst || Community Member @hyderabaddao
0x9527๐ฆ @coffiasse
578 Followers 287 Following Full Stack Developer & Security Researcher ๐ฉ DM for Partnerships
Lightoasis @lightoasis3
123 Followers 831 Following
OxNoble ๐ @OxNoblee
78 Followers 979 Following Web 3 developer and smart contract auditor| | crypto enthusiast๐ณ| God fearing |
0xVictorSR @0xVictorSR
67 Followers 292 Following Learning Web3 Security ๐ก๏ธ | Sharing my path to becoming a Security Researcher ๐งญ.
Kevin K Kien @KevinKKien
230 Followers 1K Following Finding vulnerabilities @ Solidity smart contracts, Application Security.
Player @Players__X
4 Followers 252 Following Playing Web3 - someone aware of the game, chooses adventures, knows endgame & ways to achieve it. Enhances skills/stats, learns more each play.
King Tublas๐จโ๏ฟฝ... @kingTublas
2K Followers 1K Following Building secure smart contracts with Solidity | Specializing in smart contract auditing | Sharing my Web3 coding journey
niwde.eth @niwde_tan
1K Followers 3K Following Building in Progress... Intern @HatchdotQuest Lurking @0xAlphaGEMs Prev @AlphabotApp @Mittaria_Origin
darkstar @darkstarpp
1 Followers 51 Following
Kavita B @0xscaudits
368 Followers 3K Following Founder - Zyphernix Security @zyphernixsec | Security Researcher
PETER d/acc @0xpeternguyen
1K Followers 6K Following Exploring tech frontier. From ideas to magic. Warpcast: https://t.co/b0hdTuEdou
ASHxSP @Ash_SolidProof
228 Followers 732 Following Solidity Security Auditor | Blockchain Security Researcher | Focused on EVM/Solana-based vulnerability analysis, DeFi protocol Audits, and formal verification
0xApple @0xapple_
67 Followers 106 Following Independent Security Researcher | ๐ ๏ธ Breaking contracts to build trust | 3 Top 10๐ @Sherlockdefi
DrParadox @DrParadox05
92 Followers 759 Following
0xRaz @0xRazine
48 Followers 502 Following Smart Contract Security Researcher on a quest | Telecom MSc, Ex-CPO and co-founder at EdTech company | @CyfrinUpdraft alumni | All in into blockchain
Teflon๐ก๏ธ @0xTeflon1
68 Followers 253 Following Smart Contract Auditor โ Security Researcher โ Project Manager
Trident @TridentSolana
1K Followers 41 Following Ship secure code and find vulnerabilities using @Solana's first fuzz testing framework, processing 10,000+ tx/ps. (granted by @solanafndn) by @AckeeBlockchain
Syed Ghufran Hassan @SyedGhufranHas1
139 Followers 1K Following Security Researcher | Open Source Developer | 3d modeler https://t.co/6vnRxWbs2w Keen to create digital products for SMEs.
MarT1n @t1n_mar
97 Followers 714 Following ๐ฉท @Juju29382800; ๐๐ป๏ผ Auditor @BlockSecTeam; Ex Huawei.
BhaskarTiwari (๐ ๏ฟฝ... @BhaskarWeb3
110 Followers 2K Following Web developer |๐ฅWeb 3๐ฅ| Investor
Rishab batra @Rishab_2003
31 Followers 577 Following
Drazz @Demyizz
297 Followers 606 Following Ex - Ambassador @Din_lol_ | @Galxe | @Gravitychain still here, still building, still curious
demaxl.eth @demaxil
81 Followers 336 Following 4+ years building software for clients across the globe now I am securing the blockchain by auditing and researching. Blockchain Security Researcher
BoyD (rtrd/acc) @0xDestinyae
444 Followers 388 Following Whitehat - contributor at @LineaBuild, @alignedlayer @ethereum : shitcoins โ alt: @boydestinyae
n4r35h @AegisTrail
37 Followers 262 Following Cracked Web2 Security Researcher by day, Staged Web3 Security Researcher by night(still cooking). Late nights are powered by energy drinks!
Daniel526 @dani3l526
4K Followers 1K Following a retard locked in. || @LeafNodeLabs || 40+ H/M in public contest. @HackenProof Security Researcher
odssyy @0dssyy
0 Followers 7 Following
jin @InfoFinanceEth
443 Followers 1K Following infoโ๏ธfinance | intel๐ฐ๏ธfinance | @POLYNANCE_X | Prediction Market | ClaudeGarden
ๅ่ช่ฆๅ้ธกๅ ฌ็ ฒ @8olidity
514 Followers 672 Following Smart Contract Auditor ๆบ่ฝๅ็บฆๅฎก่ฎกๅ/ๆธ้ๅทฅ็จๅธ e-mail: [email protected]
Trends for United States
You might like
