Independent security researcher · MD
I review smart contracts and protocol logic across EVM, XRP Ledger, and Solana systems. My public record includes five findings on Sherlock and Cantina, three rated medium severity.
01 / Audit work
Sherlock and Cantina results, with protocol context and public source links.
XRP Ledger protocol review
ValidVault rejects a SponsorshipTransfer that modifies a vault.AMMDeposit transactions to reject the liquidity provider.DeFi lending review
DeFi hooks competition
02 / Selected work
Selected from 30+ repositories · security, protocol systems, clinical computing, and threat intelligence.
Manifest-driven on-chain CTF infrastructure with Foundry templates, per-player Anvil launchers, and Docker/Kubernetes deployment.
Recursively traces Solana token flows across wallets and exports transaction paths for investigation.
Sealed-bid auction infrastructure on Solana using Anchor and private ephemeral rollups.
Privacy-preserving medication eligibility with Midnight Compact contracts, nullifiers, and zero-knowledge credentials.
An on-chain pet whose survival is tied to real leveraged Flash Trade perpetual positions and MagicBlock state.
On-chain short-video social with Walrus storage, a Sui Move social graph, and real-SUI gifting on mainnet.
Tri-modal regulatory intelligence that monitors written, visual, and spoken regulator communications.
Threat-intelligence pipeline for Indonesian financial data leaks with risk scoring and PII masking.
Customer-service agent with three-tier failover across model, tool, and provider gateways plus guardrails.
Eleven FHIR R4 tools over HAPI for closed-loop follow-up of incidental imaging findings.
ATLS primary survey from chest X-ray and vitals using Qwen2.5-VL-72B on AMD MI300X.
Citation-first clinical QA over public guidelines with hybrid retrieval, MCP tools, and a verifier loop.
03 / Writing
Reproduction notes, challenge writeups, and postmortems.
Challenge writeups and security notes covering smart contracts, web exploitation, cryptography, forensics, RF/SDR, and Linux internals.
Five Git forensics challenges spanning hidden commits, odd authorship, deleted blobs, and replace refs.
Beating an event-handler blocklist and strict CSP with an autofocus payload and top-level navigation leak.
Carving a PNG, ZIP, and PDF polyglot to recover and reassemble a three-part flag.
Separating five overlapping 915 MHz transmissions across Morse, FM voice, AX.25/APRS, and DQPSK.
Recovering a Diffie-Hellman private exponent through the Debian OpenSSL weak-PRNG vulnerability.
Exploiting missing program ID checks in Solana cross-program invocation verification.
04 / Background
Independent research, CTFs, and applied systems work.
DeFi accounting and invariants, access control, proxy and ABI edge cases, oracle assumptions, Solana CPI verification.
Solidity, Rust and Anchor, Python, TypeScript, JavaScript, Compact, SQL, and Bash.
On-chain forensics, web exploitation, cryptography, RF/SDR, OSINT, threat intelligence, and Linux privilege escalation.
FHIR, clinical retrieval, medical workflow agents, MCP, FastAPI, PostgreSQL, structured verification, and data masking.
05 / Achievements
Hackathons, audit competitions, and CTFs.