theyardmic / Audits-by-kiki

Personal portfolio of Kicki's audits for my learning

Kiki's security audits, reviews, and contributions

Some of my personal security audits, reviews and contributions will be shared here.

Private Audits

• Flashare - Decentralized Fund Raiser

Guardian Audits

• Raisin Labs - Peer to Peer Fundraiser
• Poodl - Dividend Paying Token

Contest Findings

Vulnerability	Severity	Vulnerability Type	Protocol	Protocol Type	Platform
Unbound loop in getLockedFunds() can cause DOS preventing refunds.	High	DOS	OpenQ	Bounty Platform	Sherlock
Max out nft deposit with low value ones making bounty undesirable.	Medium	Transfer	OpenQ	Bounty Platform	Sherlock
malicious or paused tokens can cause claiming to fail.	High	Transfer	OpenQ	Bounty Platform	Sherlock
Token Address Limit can be reached by sending dust amounts of junk tokens.	Medium	Transfer	OpenQ	Bounty Platform	Sherlock
Unsafe Transfer of arbitrary erc20 tokens.	High	Transfer	Cooler	P2P Lending	Sherlock
If user repays more than what is owed the function will revert	Medium	Front-Running	Cooler	P2P Lending	Sherlock
Attacker can drain fractional tokens from pair	Medium	Arithmatic	Caviar	NFT AMM	Code4ena
Dutch auction getPrice() formula can lead to price reaching 0	High	Arithmatic	Escher	NFT Marketplace	Code4ena
Funds will be locked in FixedSale.sol if all editions are not sold.	Medium	Locked Funds	Escher	NFT Marketplace	Code4ena