Security
Independent smart contract security research
Found a missing chainId in an EIP-712 domain separator, which let a signature made for one chain be replayed on another. Separately, proved a slippage exploit in a Uniswap V3 fork: on a forked test network, a front-run took 50% of a migration and up to 100% of a mint.
What it taught us: The contracts passed zero as a minimum straight into the pool, so the 0.5% guard in the interface did nothing for anyone calling them directly.
Foundry, Slither, Hardhat, EIP-712, Uniswap V3
Research project
ArbiFlashBot
A BNB Chain flash-loan arbitrage engine in Go and Solidity, deployed next to the block relays with round trips under 5 ms. On-chain analysis of 285 competing trades showed the remaining edge was under $0.40 a trade, which was below the cost of running it.
What it taught us: The engine worked and the economics didn't, so no more money went in. Checking the numbers earlier would have saved the build.
Go, Solidity, AWS, On-chain analysis
Smart contract
ERC-4337 smart account
An account abstraction wallet contract, deployed and verified on the Sepolia test network so anyone can read the code.
What it taught us: Publishing verified code lets a buyer check the work without taking anyone's word for it.
Solidity, ERC-4337, Foundry
Read the verified contract
AI tool
GitGrade
A hackathon project that scores any GitHub repository on seven quality measures and explains the result.
What it taught us: A score is only useful if it tells you what to fix next.
Python, Streamlit, AI
Open GitGrade
Open code
Public Solidity projects
A Merkle airdrop, a DAO, an over-collateralised stablecoin, a verifiable random raffle and an NFT marketplace, written and tested in public.
What it taught us: Tests matter more than demos. A contract you can't test is a contract you can't trust.
Solidity, Foundry, Hardhat, Chainlink VRF
See the code on GitHub