0xcuriousapple / curiousapple-audits

box of chocolates

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

curiousapple πŸ¦‡

Independent Security Researcher


Bridges, DEXs, Perps, Vaults, Lending Markets, Stablecoins, LSDs,
NFT Market Places, NFT Drops, DAOs, Social, Games, Smart Accounts....
Have audited all !!!   🌏 🌍 🌎
If your protocol does not belong there, bring it on ! will take it as challenge πŸ˜„
Ping me at curiousapple on telegram or discord to take it forward ✈️

Previosuly as Macro's Auditor

Apprentice (2 mo) > Associate (7 mo) > Lead (3 mo)

Client Report Position Duration
Connext Open Associate + Point 6 weeks
Fuji Open Lead (Solo Auditor) 4 weeks
PartyDAO-2 Open Lead 2 weeks
NFT-Hashi Private Lead 0.5 week
Kwenta Open Associate 2 weeks
TreasureDAO Private Associate 4 weeks
Sommelier-1 Open Associate 2 weeks
Sommelier-2 Private Associate + Point 3 weeks
Sommelier-3 Open Associate 3 weeks
PartyDAO-1 Open Associate 4 weeks
Zion Private Associate + Point 2 weeks
Makerdao Open Associate 1 week
Synthetix Open Associate 1 week
Hop Private Associate 0.5 week
xDonations Open Associate 0.5 week
Thirdweb Open Associate + Point 2 weeks
Frax TWAMM Private Apprentice 2 weeks
Wristables Open Apprentice 1 week

Public Audit Contests (Big Wins) πŸŽ–οΈ

  1. First Position for Raft Finance (1H, 1M, 3L, 1G)
  2. First Position for VMEX Finance (1H, 1L)
  3. Third Position for Socket Messaging Bridge (1H, 1M, 1L)
    Currently serving as their in-house security expert

Private Audits 🌱

Client Report
WeFi Finance Private
Raft- 1, 2, 3, 4, 5 Open, Open, Open, Open, Open
Ambire-1 Open

Bug Bounties πŸŽ…

  1. Critical - Thirdweb
  2. Critical - Will Reveal soon
  3. High - Cow
  4. High/Medium - Ambire, ERC1271 Issue, 15+ Teams affected
  5. High - Thirdweb
  6. High - Reported in Jan, TBA
  7. High - Reported in Feb, TBA
  8. Medium - Reported in Feb, TBA
  9. Medium - Raft
  10. Medium - Spiral DAO
  11. Medium - Will reveal soon (1 month)

Bunch of lows

Publications πŸ“‘:

  1. ERC1271 Replay - 15+ Teams Affected
  2. How To Consume Chainlink Price Feeds Safely
  3. Solidity Gas Optimizations Cheat Sheet
  4. Synthetix Staking Rewards Issue - Inefficient Reward Distribution

About

box of chocolates