README.md

My Audit Portfolio of All Valid Accepted Findings

Table of Content

• My Audit Portfolio of All Valid Accepted Findings
  • Table of Content
    • About Me (alymurtazamemon)
  • 2023
    • Q3 Contests
      • Allo V2
      • Beedle - Oracle free perpetual lending
      • Foundry DeFi Stablecoin
      • Amphora Protocol - A borrowing and lending protocol.
      • PoolTogether - The permissionless protocol for saving and winning.

About Me (alymurtazamemon)

I am an Independent Smart Contracts Security Researcher at Code4rena and CodeHawks.

I started my auditing career in July 2023 from Code4rena contests.

Below you can find my all valid issues found during auditing contests to enhance your learning experience.

You can view my Profiles on:

• Code4rena
• CodeHawks

You can reach me out on:

• Twitter
• LinkedIn
• Discord

2023

Q3 Contests

Allo V2

• Contest Duration: 10 DAYS
• Dates: SEPT 11 2023 -> SEPT 21 2023
• Platform: Sherlock
• Findings:
  • M-01: Incompatibility with deflationary / fee-on-transfer tokens

Beedle - Oracle free perpetual lending

• Contest Duration: 2 Weeks
• Dates: JUL 24 2023 -> AUG 07 2023
• Platform: CodeHawks
• Findings:
  • H-01: Fee contract executes swap without slippage protection.
  • M-01: Incompatability with deflationary / fee-on-transfer tokens.
  • QA (Quality Assurance) Report
  • Gas Optimization Report

Foundry DeFi Stablecoin

• Contest Duration: 2 Weeks
• Dates: JUL 24 2023 -> AUG 05 2023
• Platform: CodeHawks
• Findings:
  • H-01 (upgraded M -> H): We would not be able to incentivize the liquidators.
  • M-01 (downgraded H -> M): Broken getUsdValue function if considering all price feeds
  • M-02 (downgraded H -> M): DOS - Price feeds' Heartbeat is hardcoded
  • M-03: Users can mint more DSC than deposited collateral
  • M-04: Chainlink price staleness checks not complete

Amphora Protocol - A borrowing and lending protocol.

• Contest Duration: 1 Week
• Dates: JUL 22 2023 -> JUL 27 2023
• Platform: Code4rena
• Findings:
  • Grade-A - QA (Quality Assurance) Report
  • Grade-B - Gas Optimization Report

PoolTogether - The permissionless protocol for saving and winning.

• Contest Duration: 1 Week
• Dates: JUL 08 2023 -> JUL 15 2023
• Platform: Code4rena
• Findings:
  • Grade-A - QA (Quality Assurance) Report
  • Grade-A - Gas Optimization Report