Senior blockchain security auditor with over a decade of experience analyzing complex systems. Active Ethereum contributor since 2016, with 4+ years of professional experience assessing protocol and smart contract security across multiple blockchain ecosystems.
Currently a Senior Security Auditor at Defense [by Thesis], previously at Least Authority, contributing to security assessments of 40+ projects spanning smart contracts, cross-chain infrastructure, and protocol-level architectures.
Focused on identifying systemic and protocol-level vulnerabilities through rigorous reasoning about trust boundaries, state transitions, economic assumptions, and adversarial edge cases. Combines detailed code analysis with architecture review and direct collaboration with protocol teams to uncover subtle, high-impact risks.
Particularly interested in the security, correctness, and privacy properties of decentralized financial infrastructure.
-
Duplicate Liquidations Can Drain Protocol Assets
Templar Protocol Smart Contracts — Critical · Report
-
Conflicting UTXO Management Rules May Eventually Lead to Bridge Lockup
Satoshi Bridge Smart Contracts — High · Report
-
Boost Is Not Revalidated on veBTC Principal-Changing Operations
Mezo Earn Smart Contracts — High · Report
-
Free Borrowing by Borrowing at the Start and Repaying at the End of a Time Chunk
Templar Protocol Smart Contracts — High · Report
-
veNFTs With Active Gauge Votes Can Be Deposited Into Managed veNFTs (Fork-Inherited Gauge Voting Power Desynchronization from Aerodrome Design)
Mezo Earn Smart Contracts — High · Report
-
Deposit Messages Containing
extra_msgCan Be Directly Submitted toverify_depositSatoshi Bridge Smart Contracts — High · Report
-
User Can Mint Owed Fees as stBTC Resulting in Paying Zero Fees to the Portal
stBTC Smart Contracts — High · Report
-
calc_pnl_longFunction Can Prevent Closure of Valid Positions and Deprive the User From Receiving ProfitVelar Vyper Smart Contracts — High · Report
-
Incorrect Implementation of addVestingScheduleAllocation and removeVestingScheduleAllocation (Multiple vesting accounting invariant violations)
Data Lake Token Vesting Smart Contracts — Severity not specified in the report · Report
-
Collateral Can Be Lost if Added During the Liquidation Process
Templar Protocol Smart Contracts — High · Report
| Client | Project Name | Date | Report | Type | Language | My Findings |
|---|---|---|---|---|---|---|
| Mezo | Mezo Earn Smart Contracts | January 2026 | 📄 | Smart Contracts | Solidity | 1, 2, 3, 4, 5, 6, 8, 9 |
| Threshold Labs | Beta Signer Allowlist & Bridge Fee Rebates | September 2025 | 📄 | Smart Contracts | Solidity | 1, 2, 3, 4, 5, 6 |
| Midl Execution Layer | Midl Runes Indexation | September 2025 | 📄 | BTC Indexer | Rust | 2, 5 |
| Mezo | MezoBridge Smart Contract | September 2025 | 📄 | Smart Contracts | Solidity | 1, 3 |
| Rhea Finance | Satoshi Bridge | August 2025 | 📄 | BTC<>NEAR Bridge | Rust | 1, 2, 3 |
| Templar Protocol | Templar Smart Contracts | July 2025 | 📄 | Smart Contracts | Rust | 1, 4, 5, 6, 7, 10, 11, 12, 13, 14*, 15, 16, 18, 19 |
| Coffer Network | Coffer Smart Contracts | January 2025 | 📄 | Smart Contracts | Solidity | 2, 3, 4, 5, 6, 7, 8, 9*, 10, 11* |
| NEAR Satoshi Protocol | NEAR Satoshi Protocol Smart Contracts | November 2024 | Private | Smart Contracts | Rust | Private |
| Acre & Mezo | stBTC Smart Contracts | August 2024 | 📄 | Smart Contracts | Solidity | 1, 2, 5, 6 |
| Velar Labs | Vyper Smart Contracts | June 2024 | 📄 | Smart Contracts | Vyper | 5, 6, 7, 8, 9, 10, 11*, 15, 20, 21, 22, 23, 24 |
| Diva Staking | Diva Smart Contracts | April–May 2024 | Private | Smart Contracts | Solidity | Private |
| Threshold Network | tBTC Base Smart Contracts | March 2024 | 📄 | Smart Contracts | Solidity | 1*, 2, 3, 4, 5*, 6*, 7* |
| Mezo | Portal Smart Contracts | March 2024 | 📄 | Smart Contracts | Solidity | 1, 3, 4*, 5, 6, 8*, 9*, 10, 11, |
| Cube3 Protocol | Cube3 smart contracts | October 2023 | 📄 | Smart Contracts | Solidity | C, D, 3, 4, 5, 6 |
| FilFi | Filfi smart contracts | September 2023 | 📄 | Smart Contracts | Solidity | A, B, F*, 1, 2, 7, 8, 9, 10, 11, 12* |
| NEOKingdom DAO | DAO smart contracts | September 2023 | 📄 | Smart Contracts | Solidity | A, B, C, D, 3, 4 |
| Worldcoin | Groth16 Verifier in the EVM smart contract | August 2023 | 📄 | Smart Contracts | Solidity | None |
| Golem Foundation | Octant smart contracts | July 2023 | 📄 | Smart Contracts | Solidity | 5, 6, 7, 8, 9 |
| Ava Labs | Teleporter Smart Contracts | July 2023 | 📄 | Smart Contracts | Solidity | A, B, C, 5, 6, 7*, 8*, 9* |
| Data Lake | Consent smart contracts | December 2022 | 📄 | Smart Contracts | Solidity | A |
| Data Lake | Token Vesting smart contracts | December 2022 | 📄 | Smart Contracts | Solidity | A, B, C, E, G, 1*, 2*, 3, 4, 6* 7* |
| Sovryn | Bi-directional FastBTC | September 2022 | 📄 | Smart Contracts | Solidity | None |
| Endaoment | V2 smart contracts | July 2022 | 📄 | Smart Contracts | Solidity | 1, 2, 3 |
| PiSwap Protocol | PiSwap smart contracts | May 2022 | 📄 | Smart Contracts | Solidity | 1, 2 |
An asterisk (*) next to an issue number indicates a shared finding.
| Expertise |
|---|
| EVM / Ethereum Ecosystem |
| Bitcoin Protocol & Applications |
| NEAR Protocol |
| DeFi Protocols |
| DAOs & Governance Systems |
| Cross-Chain Bridges |
| Smart Contract Architecture & Security |
| Languages |
|---|
| Solidity |
| Vyper |
| Rust |
| Typescript |
| Javascript |
| Java |
#audit #auditor