Security engineer focused on Web3 product security, protocol review, and security automation.
I help teams secure protocol and product changes from design through deployment: threat models, invariant and fuzz testing, CI security gates, review heuristics, monitoring/runbooks, and remediation guidance.
Former Blockchain Security Consultant at Trail of Bits. My public review work includes Franklin Templeton, Immutable zkEVM Bridge, Seaport, Maple Finance V2, LooksRare, Arcade.xyz, MYSO v2, Primitive Hyper, and a Code4rena high-severity finding in Stader.
- Protocol security: Solidity, EVM, DeFi accounting, access control, oracle assumptions, upgradeability, governance/signer risk
- Product security engineering: threat modeling, CI security checks, monitoring rules, incident runbooks, privileged-role hardening
- Security automation: fuzzing, invariant testing, static analysis, audit notebooks, graph-based review, AI-assisted review workflows
- AI security: RAG hygiene, prompt-injection-aware pipelines, audit-drift detection, human-in-the-loop review
- Franklin Templeton tokenized fund
- Immutable zkEVM Bridge
- Seaport / OpenSea
- Maple Finance V2
- LooksRare
- Arcade.xyz
- MYSO v2
- Primitive Hyper
- Code4rena high-severity finding: Stader, 2023
See: work-sample
| Project | What it demonstrates |
|---|---|
| work-sample | Public security review writing samples from Trail of Bits and Code4rena |
| meridian | Audit notebook generator for turning codebases into navigable security-review workspaces |
| ledgerline | Web3 payment/revenue infrastructure with on-chain Merkle anchoring, tests, and verifier flow |
| rag-hygiene-scanner | CI-friendly scanner for prompt-injection indicators, risky HTML/Markdown, PII, and secret-like content |
| solidity-audit-graph | Solidity code graph tooling for protocol review workflows |
I am especially interested in security roles that combine hands-on engineering with deep review of production systems: product security, protocol security, security tooling, Web3 infrastructure, and AI-assisted secure development.
Contact: LinkedIn · SuperDroids