# 🧠 Portfolio Hey! **[Maze](https://sherlock.xyz/u/maze_)** here — I’m a **Web3 Security Researcher**. **Rust, Solidity, even Vyper** — I find bugs in any language. **Ethereum, Solana, Cosmos** — I find bugs in any stack. --- ## 📊 Performance Summary | Metric | Value | | ------------------- | ------------------ | | **Total Earnings** | **$5.05K** | | **Total Contests** | **826 (All Time)** | | **Total Payouts** | **12×** | | **Top 10 Finishes** | **3×** | | **Top 25 Finishes** | **6×** | | **Top 50 Finishes** | **7×** | --- ## 🧩 Detailed Audit History ### **May 2025** | Contest | Platform | Earnings | Rank | Key Findings | | ------------------------------------------------------------------------------------ | --------- | ----------- | ------- | -------------------------------------------- | | [Audit 507](https://code4rena.com/audits/2025-05-audit-507) | Code4rena | 323.07 USDC | **#12** | — | | [Alchemix V3](https://cantina.xyz/competitions/e68909e6-3491-4a94-a707-ecf0c89cf72a) | Cantina | 47.7 USDC | **#75** | **High:** (Private)
**Medium:** (Private) | --- ### **April 2025** | Contest | Platform | Earnings | Rank | Key Findings | | --------------------------------------------------------------------------------------------- | --------- | ------------ | -------- | --------------------------------------------------------------------------------------------------------------------------- | | [Cabal Liquid Staking Token](https://code4rena.com/audits/2025-04-cabal-liquid-staking-token) | Code4rena | 249.98 USDC | **#8** | **Medium:** Desynchronization of internal accounting vs actual staked `INIT` amounts allows over-minting of `sxINIT` tokens | | [Kinetiq](https://code4rena.com/audits/2025-04-kinetiq) | Code4rena | 9.35 USDC | **#33** | **Medium:** Inconsistent state restoration in `cancelWithdrawal()` leads to stale user balances | | [Staking Part 2](https://codehawks.cyfrin.io/contests/cm8iwzzel0002jv03235nowd6) | CodeHawks | 4103.92 USDC | **#7** | — | | [Mighty Contracts](https://cantina.xyz/competitions/616d8bb4-16ce-4ca9-9ce9-5b99d6e146ef) | Cantina | 0.07 USDC | **#115** | **High:** (Private) | --- ### **March 2025** | Contest | Platform | Earnings | Rank | Key Findings | | -------------------------------------------------------------------------------------------------------- | --------- | ---------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------ | | [Forte: Float128 Solidity Library](https://code4rena.com/audits/2025-03-forte-float128-solidity-library) | Code4rena | 49.20 USDC | **#23** | **High:** `ln()` accepts invalid non-positive inputs
**High:** `sqrt()` silently reverts entire control flow on zero-value packed float | --- ### **February 2025** | Contest | Platform | Earnings | Rank | Key Findings | | -------------------------------------------------------------------------------------- | --------- | ---------- | -------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [Virtuals Protocol](https://code4rena.com/audits/2025-02-virtuals-protocol) | Code4rena | 35.33 USDC | **#56** | **Medium:** Slippage check at execution time provides no real protection as it reads post-trade price | | [Liquidity Management](https://codehawks.cyfrin.io/contests/cm6q1gbpq0000va6agddmgfn6) | CodeHawks | 0.66 USDC | **#55** | **Low:** Incorrect token-price validation in `KeeperProxy` | | [Core Contracts](https://codehawks.cyfrin.io/contests/cm5vbyum90000ffs0xblmb4gj) | CodeHawks | 41.64 USDC | **#201** | **High:** ZENO redemption yields negligible USDC value
**High:** Decimal mismatch in `Auction::buy()` leads to massive overpayment
**High:** Flawed TWAP fee distribution
**High:** Hard-coded FX rate corrupts deposits/redemptions
**Medium:** Liquidations blocked by strict debt check
**Medium:** Missing freshness check for `RAACNFT` price
**Medium:** Boost multiplier always returns max value
**Low:** Incorrect timestamp tracking in `RAACHousePrice`
**Low:** Inconsistent voting-power logic | --- ### **January 2025** | Contest | Platform | Earnings | Rank | Key Findings | | ----------------------------------------------------------------------------------- | --------- | ----------- | ------- | --------------------------------------------------------------- | | [Aave DIVA Wrapper](https://codehawks.cyfrin.io/contests/cm5w96e2f000012k5n46wdw43) | CodeHawks | 0.04 USDC | **#9** | **Low:** Misordered constructor parameters in `AaveDIVAWrapper` | | [Ignite](https://codehawks.cyfrin.io/contests/cm5krlfvj0002lwjwlvbhvxxr) | CodeHawks | 121.92 USDC | **#18** | — |

Maze

Public reviews