Public findings
6
Skillset
Self-reported
Admin verified
Account Abstraction & Wallets
Blockchain Platforms (L1 + VM)
Cross-Chain & Interoperability
Cryptography & ZK
Biography
Lead Security Researcher at Spearbit
180+ security reviews since 2023 (130+ private audits, 50+ public contests) across EVM, Solana, Stellar/Soroban, Starknet (Cairo) and Move
Track record
- 400 Critical/High findings across 130+ private audits · $1.3B TVL audited · no exploit on any scope I have audited
- 1st Venus Governance, Fenix Finance · 2nd Recall · Top-5 ZetaChain (5th of 94), Thorn, Badger DAO, Mellow · 20 top-10 finishes across Cantina, Code4rena, Sherlock, CodeHawks and Hats
- 120+ High/Medium contest findings · Code4rena annual leaderboard Top-40 in 2023 and 2024 · $70K+ in contest rewards and bounties
- Ethereum Foundation: auditor for the ERC-7730 clear-signing registry
- Origami Finance: embedded security advisor for six months on a $122M TVL vault
- CertiK "Stump the Auditor" CTF: 2nd place
Bug bounties
- Floki (then ~$2B market cap): High-severity bug in the treasury contracts that let anyone drain accumulated transfer-tax revenue through zero-slippage swaps; confirmed and paid via Immunefi
- Kaskad (then $2M TVL): 3 Medium
- HastraFi (then $980M AUM): 1 Medium
Selected private audits (collaborative and solo)
WLFI (4 audits), ENS DAO, Lido, Ethereum Foundation, Securitize (3 audits), M0, Venus, Bebop, Origami Finance, Pons, VeeFriends, Temple DAO, HyperLink (Hyperliquid), STBL (Stellar), Cabal, Shift Protocol, CrediFi, RootsFi, CoBuilders
Selected High/Medium contest findings
Kelp DAO, Renzo, ZetaChain, Starknet Perps, Badger DAO, Recall, Safe (extensions), Allo Protocol (Gitcoin), Wise Lending, Stryke, Chakra, DODO
Specialties
Cross-chain messaging (LayerZero OFT/OVault, Hyperlane, CCIP) · non-EVM: Soroban, Cairo, Solana, Move · lending/CDP and stablecoins (Liquity, Compound, Morpho forks) · ERC-4626/7540 vaults · LST/LRT restaking · perps/DEX and RFQ routing · RWA and security tokens · governance · launchpads · account abstraction (4337/Safe)
Top competitions
View allContest | Position | Date | Payout |
|---|---|---|---|
zetachain-protocol | 5 / 94 | August 2024 | $3,955 |
Aquarius | 13 / 55 | May 2025 | $2,679 |
infinifi-protocol | 9 / 44 | April 2025 | $1,245 |
Security portfolio
Title | Description |
|---|---|
| Bebop Router | RFQ swap router executing maker-signed quotes via Bebop's private market maker settlement. |
| ENS DAO | ENS treasury contract routing registrar ETH registration fees to the Endowment Safe. |
| Firm Money | LiquityV2 fork on StatusL2 minting the USF stablecoin against ETH and SNT collateral. |
| HyperLink | Prime broker for Hyperliquid enabling privacy-preserving trading through AWS Nitro Enclaves. |
| Lido | Emergency pause manager letting designated pausers pause critical Lido contracts on admin's behalf. |
| M0 | PYUSDX interest-bearing stablecoin with wrapper extensions, swap facility, and LayerZero cross-chain portal. |
| Buck | Upgradeable stablecoin system issuing BUCK backed by USDC reserves and attested STRC collateral. |
| VeeFriends | VeeFriends NFT token migration to a new chain, re-minting and burning legacy burned tokens. |
| WLFI | World Liberty Financial V3 unlock upgrade introducing one-shot vesting elections for legacy holders. |