Proof
Every claim below links to evidence you can verify yourself: public contest reports, disclosed vulnerability writeups, and leaderboard entries.
Verify directly
Some findings are public, others are recorded on the Immunefi leaderboard but remain confidential per client agreement. I disclose only what protocols authorize. In addition, I have submitted multiple paid, confidential bug reports directly to protocols under NDA. I disclose only what clients explicitly authorize.
5 Selected Findings
- Critical Denial of service MUX Immunefi 2024 Writeup ->
- Critical Access Control Oasys Immunefi 2023 Writeup ->
- High Accounting Neo Tokyo Code4rena 2023 Report ->
- High Decimal precision Surge Sherlock 2023 Report ->
- High Cross-function reentrancy Stakehouse Code4rena 2022 Report ->
I maintain a catalog of vulnerability patterns built from years of bounties, audit contests, and private engagements. A public subset is available here.