I audit smart contracts and build full-stack products
My audit findings are public on Code4rena, CodeHawks and Sherlock, so you can check them before you write to me. I also designed, built and deployed two live products on my own.
Valid findings
Contests and reviews
Reply time
Two ways to work with me
An audit if the code already exists. A build if it doesn't yet.
Smart Contract Audits
For teams with Solidity that needs a review before deployment, a raise, or a public launch. Manual review, Foundry proofs of concept, a written report and a check of your fixes.
- Starting at $3,000, priced by lines of code
- Findings stay private, NDA on request
- Severity-ranked report with a fix for each issue
- Fix verification before launch
Full-Stack Development
For founders who need a product built end to end. Web apps and SaaS, or a contract system with its frontend, from the database schema to the deployed site.
- Web apps and SaaS on Next.js, Node.js and PostgreSQL
- Smart contract development from $5,000+
- Full dApp builds from $15,000+
- Testing, deployment and launch support included
Audit work you can check
Every result below links to a public report or contest profile.
Pear Protocol V1 Security Review
Private team review of a pairs-trading protocol, with Shieldify
Reported a high-severity fee-accounting bug that overwrote referrers' pending payouts on every trade, with a fix. Full findings are in the published report.
AI Arena - Code4rena Competition
Public audit competition for AI-powered gaming platform
Finished #89. Two High and one Medium finding confirmed valid by the contest judges.
Foundry DeFi Stablecoin
CodeHawks audit competition for a collateral-backed stablecoin
Two High findings on token-decimal handling: collateral mispriced for non-18-decimal tokens, and a hardcoded health factor that can liquidate healthy positions.
Products I built and run
Both are live. I designed, built and deployed each one on my own.
NumDojo — Speed Math Learning Platform
My own production SaaS: a speed-math learning platform with 180 lessons, spaced-repetition review, and real-time 1v1 math battles. Designed, built, and shipped solo — from the PostgreSQL schema to the Stripe billing.
- Solo-built end to end: frontend, backend, schema, payments, real-time
- Real-time 1v1 battles with ELO matchmaking over Socket.io
- Hardened the way an auditor would: auth, rate limits, parameterized queries
Longtail — Daily Rare-Answer Trivia
A daily trivia game where any right answer scores, and the less popular your answer is, the more it is worth. Six prompts a day, thirty seconds each, the same six for everyone.
- No framework or runtime dependencies: plain ES modules on a static host
- Answer data built from Wikidata and ranked by Wikipedia pageviews
- Scoring engine separated from the UI and covered by tests
Latest writeups
Findings explained line by line, and notes on how I audit and build.
Shipping a Real-Time Multiplayer SaaS Solo: What Building NumDojo Taught Me
What it actually took to build NumDojo alone: a 50+ table PostgreSQL schema, SM-2 spaced repetition, Socket.io duels with ELO matchmaking, and Stripe billing.
Pear Protocol: A Fee Setter That Erased Every Referrer Payout
A smart contract audit finding from the Pear Protocol V1 review with Shieldify: how an overwrite instead of an add silently deleted every pending referrer fee.
How to Prepare Your Contracts for an Audit
What actually makes a smart contract audit faster and better, from the auditor reading your code: freeze scope, write the intent down, ship tests, and run the free tools first.
Have a project in mind?
Send me the details. I reply within 24 hours with scope, timeline and a price.
Inquiries are confidential. NDA available on request.