Smart contract security researcher focused on EVM ecosystems, with 5+ years of fullstack engineering behind me.
My edge: I understand the full web3 stack: Frontend, Backend, Smart Contracts, and the integrations between them, where a lot of real world vulnerabilities actually live.
I audit Solidity smart contracts, reproduce historical DeFi exploits as Foundry PoCs, and participate in public audit contests.
Focus areas:
- Reentrancy, access control, and oracle manipulation
- Signature replay and EIP-712 edge cases
- MEV and front-running attack vectors
- Web2 ↔ Web3 integration vulnerabilities (my differentiator)
Active on:
Security & Smart Contracts
Solidity, Foundry, EVM, Slither, Aderyn, Echidna
Fullstack (day job)
TypeScript, React.js, React Native, Next.js, Node.js, Nest.js
Infra
AWS, Docker, PostgreSQL, MongoDB, Redis
(Coming soon - currently publishing CTF solutions and exploit reproductions)
- ctf-writeups — Ethernaut, Damn Vulnerable DeFi, and other CTF solutions
- hack-analyses — Foundry PoCs reproducing historical DeFi exploits
Open to: Smart Contract audits, bug bounty collaborations, and web3 security research engagements Day job: Senior Software Engineer, not looking to change that, but happy to chat about independent security work