MiloTruck's Portfolio

About MiloTruck

I'm an independent security researcher and 1/4th of the team at Renascence Labs.

Currently, I'm a Security Researcher at Spearbit and Senior Auditor at Trust Security.

For private audits or security consulting, please reach out to me on Twitter @milotruck.

Highlights

• Code4rena Profile
• Blog: A year of Competitive Audits
• Ranked #1 on Code4rena for 2023

Engagements

Renascence Labs

Protocol	Scope	Category	Report
Arcade.xyz	V4 Protocol	NFT-collateralized Lending	📄
Arcade.xyz	ARCD Staking	Sushiswap/Synthetix Staking Rewards	📄
Phuture Finance	V2 Protocol	Multi-chain Index, LayerZero & Stargate Integration	📄
Redacted Finance	Institutional Pirex	Liquid ETH Staking	📄
Locksmith		ERC-1155	📄

Spearbit

Protocol	Category	Report
Blast L2	OP Stack, Lido & MakerDAO Integration	📄

Trust Security

Protocol	Scope	Category	Report
Mozaic Finance	Theseus Vault	Yield, GMX V2 Integration	📄
Mozaic Finance	xMOZ Staking	Sushiswap/Synthetix Staking Rewards	📄

Private Audits

Protocol	Scope	Category	Report
Rodeo Finance	Camelot V3 Strategy	Yield, Camelot V3 Integration	📄
Rodeo Finance	GMX GM Strategy	Yield, GMX V2 Integration	📄
LUKSO	LSP4, LSP7, LSP8	ERC-20, ERC-721	📄
LUKSO	LSP0, LSP6	Account Abstraction	📄
Epoch Island	ITO	Swaps	📄
Epoch Island	ITO, VeEpoch	Swaps, ERC-20	📄

Audit Contests

Reports for all audit contests can be found here.

Contest	Category	Ranking	Report
LUKSO	Blockchain Ecosystem, Account Abstraction	🥇1st	📄
Lens Protocol V2	Social Network	🥇1st	📄
Arbitrum Security Council Elections	Governance, Voting	🥇1st	📄
StakeWise V3	Liquid ETH Staking	🥇1st	📄
Chainlink Staking v0.2	Staking	🥇1st
Morpho Blue	Lending	🥈2nd	📄
Wildcat	Lending	🥈2nd	📄

Bug Bounty

Immunefi

• Beluga Protocol: Permanent freezing of tokens by vote manipulation - Critical
• Arcade.xyz: Forcing users into loans by manipulating EIP-1271 signatures - High
• GYSR: Theft of funds through precision loss - Informational

Others

• Solmate: Edge-case in wadMul() of SignedWadMath.sol