hi HTTP 418 👋
Self-taught Web3 developer and smart contract auditor . I build mostly on Solana and in EVM (sometimes), and spend the rest of my time trying to break what I (and others) build.
- Independent smart contract security research on Code4rena, Sherlock, and Cantina
- Fuzzing smart contracts on ethereum and solana ecosystem
- Writing DeFi exploit post-mortems and Solana security notes
- Building Web3 products that actually solve real-world problems.
Smart Contracts: Solidity · EVM internals · Foundry · Anchor · Pinocchio (Solana native) Security: Echidna · Medusa · Slither · manual audit review · static/dynamic AppSec tooling App/Infra: TypeScript, Next.js, React, Python/FastAPI, Node.js
| Project | What it does | Stack |
|---|---|---|
| rust-recon-tool | Deterministic static AST analyzer for Solana Anchor smart contracts | Rust |
| continous-clear-auction-on-solana | Solana-native Continuous Clearing Auction launchpad — uniform clearing price settlement, commit-reveal bids, activity-score weighting, vesting receipts | Anchor, TypeScript |
| Q2_25_Builder_Yunohu | proof of work for the Turbin3 Q2 2025 Builder Cohort | |
| Solana-Security-Best-Practices | Notes and reference material on Solana smart contract security | — |
| serverless-solana-indexer | serverless indexer for the Solana blockchain | |
| solana-simulation-engine | transaction simulation engine on solana's lite SVM | |
| jal | On-chain protocol for tokenizing and trading water credits as Real World Assets (RWAs), originally on Solana | TypeScript, Anchor |
| tickr | Decentralized event ticketing platform built on Solana with NFT tickets | Rust, Solana |
| pinocchio-toolkit | Zero-boilerplate helper crate for writing Solana programs with Pinocchio, published on crates.io | Rust |
| Aegis-protocol | Seedless hardware wallet & proof-of-personhood protocol on Monad using the P256 precompile | Solidity |
| aegis | Autonomous, zero-trust AppSec suite powered by Gemini AI — combines SAST, DAST, SCA, API auditing, OSINT, and ASM scanning in one dashboard | Python/FastAPI, Next.js |
| damn-vuln-defi | Solved challenges from the Damn Vulnerable DeFi security wargame | Solidity |
- Pinocchio-AMM — AMM built with Pinocchio
- Pinocchio-Escrow / anchor-escrow — escrow implementations
- pinocchio-vault / anchor-vault — vault programs
- Anchor-Flash-Loan — flash loan implementation in Anchor
- stake / stake2wake — staking programs
I compete on audit platforms and do independent bug hunting .
- built rust recon tool for solana smart contracts (anchor and pinocchio )
- Previously interned at Kann Audits (5 audits) · placed 4th at Radcipher
- contributed to benchmarks for solana security skills in forefy.com ( agent skills registry )
- Active on Code4rena, Sherlock, and Cantina
- Write exploit post-mortems on real DeFi incidents, verified against on-chain data
Building in public, breaking things responsibly.