RustyRabbit
sr
@rustyrabbit
Always stay humble.
Biography
25 years of Web2 security in airport and banking environment, from firewalls to web access and identity management. From highly technical to security architecture dealing with multiple external parties (have you tried debugging a bad signature between external parties using different platforms?).
Started my web3 journey reading Andreas Antonopolous Mastering Bitcoin and Ethereum. In winter 2018 completed the Consensys Developer Academy (final project: ERC721 Gift certificates) purely out of interest to learn more about programming smart contracts.
In fall 2020 I wanted to merge my career into web3 and went through the Kernel block 2 Security track. In Sept 2021 I decided to fully commit, applied to and got accepted into Secureum Epoch 0. Was invited into the RACE phase and Spearbit invited me to do the RACE-X which was my first real Security Review getting to work with @gpersoon, @cmichel and @StErMi.
Full-time Since Nov 2022 doing Spearbit/Cantina security reviews, C4 and Sherlock contests.
Recent engagements
Security portfolio
Name | Description | |
|---|---|---|
CodeArena | before Nov 2022 | Read more |
DFlow Swap | DFlow is a decentralized marketplace that facilitates a market-driven price discovery process for order flow between wallets and a network of institutional market makers. Wallets route order flow to market makers via permissionless order flow auctions (OFAs). In return, wallets receive monetary compensation in USDC and guarantee that all customer orders are executed at the best market prices. | Read more |
Drips-Network | Drips is a protocol and app built on Ethereum that enables organizations and individuals to directly and publicly provide funding to the free and open source software projects they depend on the most. Drips also includes gas-optimized and integrated primitives for streaming and splitting tokens, allowing users and web3 apps to stream and split funds by the second with continuous settlement for use cases like contributor payments, vesting and subscription memberships. Disclaimer: This security review does not guarantee agai | Read more |
CodeArena | from Nov 2022 | Read more |