I'm an independent security researcher and 1/4th of the team at Renascence Labs. I'm also a Lead Security Researcher at Spearbit and Lead Auditor at Trust Security.
For private audits or security consulting, please reach out to me on Twitter @milotruck.
- Code4rena Profile
- Cantina Profile
- Immunefi Profile
- Blog: A year of Competitive Audits
- Ranked #1 on Code4rena for 2023
A complete list of all audits can be found here.
| Protocol | Category | Reports |
|---|---|---|
| Blast | L2 | [1] |
| Karak | Restaking | [1] |
| Juice Finance | Leveraged Farming | [1] |
| Sorella | DEX | [1] |
| Sushiswap | DEX | [1], [2] |
| Dinero | Liquid Staking | [1], [2], [3], [4], [5], [6], [7] |
| Level Money | Stablecoin | [1], [2] |
| dHedge | Bridge | [1] |
| Arcade.xyz | NFT Lending | [1], [2] |
| Rhinestone | Account Abstraction | [1], [2] |
| Phuture Finance | Index | [1] |
A complete list of all contests can be found here.
| Contest | Category | Ranking | Report |
|---|---|---|---|
| LUKSO | ERC-20, ERC-721, Account Abstraction | 🥇1st | 📄 |
| Lens Protocol V2 | Social Network | 🥇1st | 📄 |
| Arbitrum Security Council Elections | Governance, Voting | 🥇1st | 📄 |
| StakeWise V3 | Liquid ETH Staking | 🥇1st | 📄 |
| Biconomy | Account Abstraction | 🥇1st | 📄 |
| Chainlink Staking v0.2 | Staking | 🥇1st | |
| YOLO Games | GameFi | 🥇1st | |
| Morpho Blue | Lending | 🥈2nd | 📄 |
| Wildcat | Lending | 🥈2nd | 📄 |
| Optimism Fault Proofs | OP Stack, Fault Proofs | 🥉3rd | |
| PoolTogether V5 | Yield Farming | 🥉3rd |
Immunefi
- Beluga Protocol: Permanent freezing of tokens by vote manipulation - Critical
- Arcade.xyz: Forcing users into loans by manipulating EIP-1271 signatures - High
- GYSR: Theft of funds through precision loss - Informational
Others