Alireza Arjmand

I am a decentralization enthusiast, focused on exploring, breaking, and learning about various blockchain systems. I like to understand and hack complex DeFi systems, cross-chain protocols, and Layer 2 solutions, learning them bottom up and breaking them top down.

I believe in learning by doing, and audits have been the perfect opportunity for that. I’ve been fortunate to work with amazing teams throughout my career. Currently I’m an LSR at Spearbit, before that I worked as an auditor at OpenZeppelin.

Auditing Experience

Cantina (Sep '25 to present)

Joined as a security researcher and now Head of Security Research, running engagements end to end and building the researcher bench.

• Audit leadership: Led and co-led reviews across DeFi, cross-chain, and L2 codebases, including Coinbase, Uniswap, Morpho, Sky. Public reports are listed below.
• Specialized reviews: ERC-4626 vault and adapter designs, ALM and redemption systems, router/aggregator architectures, and governance spell and proposal reviews,
• Team building: Sourcing, interviewing, and onboarding security researchers, plus mentoring on engagements and review quality.
• Process and tooling: Built internal tooling, checklists, and automation to standardize review depth and reporting quality across the team.

OpenZeppelin (2.5 years)

During my time at OpenZeppelin, I contributed across critical DeFi infrastructure. I completed 50+ audits and reviews for projects such as Compound, Uniswap, Sandbox, Origin, Scroll, and Linea.

I had a special focus on Compound during my time at OpenZeppelin. You can find some of my contributions below:

• Leadership in Compound reviews:

  • Audited the base protocol and uncovered multiple edge cases and issues.
  • Helped in the incident responses during high-pressure situations.
  • Reviewed governance upgrades (such as Governor upgrade, Market Admin, Comet Wrapper grant) and other Compound-related grants.

• Tooling and automation: Designed and implemented internal automation and tooling to help audits and reviews.

• Governance review: Performed 90+ proposal reviews, migrations and token assessments.

Decentralized Bounties

Here are some of the contests I participated in. I took part in most of these competitions before I joined OpenZeppelin.

Date	Contest	Platform	Rank	Payout (USDC)	Report Link
Feb ‘23	Optimism	Sherlock	#5	25,701.94	Report
Jan ‘23	Numoen	Code4rena	#2	5,284.65	Report
Dec ‘22	GoGoPool	Code4rena	#19	1,673.79	Report
Feb ‘23	Carapace	Sherlock	#13	1,248.42	Report
Oct ‘24	Kleidi	Code4rena	#3	1,141.87	Report