Smart contract security researcher & red teamer Breaking enterprise-grade RWA protocols before attackers do.
- 🛡️ Red teaming and adversarial review of tokenized real-world asset (RWA) systems
- 🔗 Cross-chain architecture: bridges, messaging layers, and settlement flows
- 🏦 Tokenization of real-world assets: compliance-aware token standards, custody, and oracle design
- 🧪 Invariant testing, fuzzing, and formal verification for production contracts
| Area | What I look at |
|---|---|
| RWA Security | Mint/redeem logic, transfer restrictions, permissioning, NAV/oracle manipulation |
| Cross-Chain | Bridge trust assumptions, message replay, finality and reorg risks |
| Access & Upgrades | Proxy patterns, role escalation, timelocks, key management |
| Economic Attacks | Liquidity, depegs, flash-loan and governance exploits |
Tooling: Foundry · Hardhat · Slither · Echidna · Medusa · Halmos · Certora · Tenderly
- 🐛 Immunefi: My whitehat profile
- 🪪 Passport: Verified credentials
- [Project / Report name]: one-line description of the finding or system
- [Audit contest / Bug bounty]: placement, severity, or impact
- [Open-source tool or PoC]: what it does and why it matters
Add links to public write-ups, contest results, or repos here.
[
](YOUR_IMMUNEFI_PROFILE_URL) [
](YOUR_PASSPORT_PROFILE_URL) [
](YOUR_DISCORD_INVITE_LINK) [
](https://x.com/YOUR_HANDLE) [
