DeFi Security Researcher | Solidity & EVM Audits | Founder of @DefiAudit

I research smart-contract vulnerabilities, build reproducible security tests, and help Web3 teams turn findings into practical fixes. My focus is Solidity/EVM security, DeFi attack surfaces, protocol invariants, and secure systems engineering.

• Manual smart-contract review and business-logic analysis.
• Foundry-based exploit reproduction, invariant testing, and regression tests.
• Static analysis with Slither and complementary security tooling.
• Public security research and educational audit write-ups.
• Security-minded engineering for systems that handle untrusted data and real-world risk.

| Project | What it demonstrates |

|---|---|

| Audit-Reports | Public audit methodology, findings, and sanitized case studies. |

| EVM Audit Lab | Reproducible Solidity vulnerability labs with before/after tests. |

| wildfire-observatory | Security-focused full-stack engineering, validation, testing, CI/CD, and resilient data flows. |

| DefiAudit organization | The home for DefiAudit research, tools, and reports. |

Solidity · EVM · Foundry · Slither · Hardhat · Python · TypeScript

1. Establish scope, trust boundaries, assumptions, and invariants.
3. Trace privileged flows, accounting, external calls, oracle dependencies, and upgrade paths.
5. Reproduce material findings with a minimal test or proof of concept.
7. Describe impact and exploitability precisely, without overstating claims.
9. Propose a narrow remediation and verify it with regression tests.

I do not publish private client details, credentials, or weaponized exploit instructions without authorization. Public reports are labeled clearly as client-approved, contest-based, educational, or independent research.

• X: DeFiAudit
• Telegram: DefiAudit0x
• GitHub: DefiAudit0x

The goal is not only to find bugs, but to make protocols more resilient.