gesha17

Securing Web3, one contract at a time.

Independent smart contract security researcher competing since 2023. I read every protocol end to end, think the way an attacker would, and back every finding with a working proof of concept.

Track record

🛠️ 60+ valid High/Medium findings across Code4rena, Sherlock, Cantina and Immunefi, plus a bug bounty payout on live code

🏆 4 top-3 finishes, including 2nd place here on Cantina, 2nd at GTE Spot CLOB and Liquid Ron, and 3rd at BitVault (all Code4rena)

🎯 2 solo findings (GTE Spot CLOB, SecondSwap), 100% High/Medium coverage at Liquid Ron, and 11 top-10 finishes

Selected findings

GTE Spot CLOB (solo): an attacker could wipe every legitimate order from one side of the order book at near-zero cost Liquid Ron (High): a vault accounting error priced shares wrongly whenever operator fees were pending, costing new depositors value Chakra (High): missing duplicate-signature checks let a single validator approve forged cross-chain messages alone

Where I’m strongest

🔍 Liquid staking and restaking, lending and CDPs, order books and DEXes, vesting, vaults, stablecoins, bridges and cross-chain messaging

⛓️ Solidity on Ethereum and EVM chains, with audits on Ronin and Hyperliquid, Cairo on Starknet, and working knowledge of Rust

I also run mitigation reviews to confirm fixes are correct and complete, not just patched.

📂 Full portfolio: https://github.com/gesha17/portfolio

📬 Open to private audits and collaborative reviews. Feel free to reach out.