I am a blockchain smart contract security engineer, I have worked on multiple defi protocols start to finish, to identify and document vulnerabilities to closely work with the project teams to mitigate them.
- 💼 I am a blockchain and smart contract security engineer with 3.5+ years of experience specifically in blockchain smart contract security.
- 📝 I have been writing blockchain security articles.
- 🏁 Previously i have contributed to some CTFs and have also participated in some.
- 🌱 contributed to open source knowledge materials like:
- Manual review section in @security-alliance's Frameworks initiative.
- Bridge security resources.
- ERC1155 fuzzing properties.
- ⭐ Did 40+ full time security reviews. found multiple critical severity vulnerabilities.
- ⭐ While doing private smart contract security audits I have found critical issues in already audited defi protocols.
- 💻 Type of procotols I audited:
- Upgradeable smart contracts(UUPS, Transparent, Dimond proxies).
- ERC2981, ERC1155, ERC777, ERC20, EIP721, EIP712 standards, and more.
- Integrations of these contracts into Defi protocols like NFT marketplaces, staking protocols, DAOs and bridges.
- I also had opportinities to work on TradFi (traditional finance) audits like "loan" and "asset" securatization on blockchains.
- Blockchain bridge security - Part 4.
- Blockchain bridge security - Part 3.
- Blockchain bridge security - Part 2.
- Blockchain bridge security - Intro & Part 1.
- My Smart Contract Auditing Mental Model.
- Debugging Hardhat smart contract project with Tenderly.
- SEAL 911: Saving Millions When Seconds Count.
- A look into transient storage’s possible security and coding mistakes.
- Understanding and exploiting reentrancy while safeMint()-ing NFTs.
- Tracing smart contract transaction calls, and events locally with hardhat-tracer.
- Hacking vulnerable smart contract: CTF by ciphershastra.com.