Smart-Contract Security

Structured review across sixteen protocols — among them Hydration, Alchemix v3, Origin, Maple, Fluid and Hashflow — each one tracked to a written verdict rather than left open. Where the review produced a critical-class finding, it produced a runnable Foundry proof of concept alongside it: a test that reproduces the defect against forked state, not a paragraph asserting one exists.

The discipline that matters here is the one that closes files. Most of those sixteen ended in no submission-ready finding, documented with the areas checked and the reasoning that dismissed each, so the work is auditable and nobody repeats it by accident six months later.

Executors that borrow, route and repay inside a single transaction across lending and AMM venues — arbitrage, liquidation and collateral refinancing — with profit floors enforced on-chain, so an unprofitable attempt reverts rather than settling at a loss.

Integrated at contract level against Morpho, Aave, Compound/Comet and Euler on the lending side, and Uniswap, Curve, Aerodrome and Slipstream for routing, with Chainlink price feeds.

A midpoint dark pool for tokenised equities where resting orders exist only as secret shares split across independent nodes. Matching opens one bit per attempt; execution happens at the oracle midpoint, so limit prices are never revealed to anyone — the venue included.

Verified against a plaintext reference implementation with 400 randomised MPC-versus-plaintext equivalence checks, holding the cryptography to the same result as the naive version on every input.

A written system rather than a habit: bug-class taxonomies, a static-analysis grep arsenal, Foundry PoC construction patterns, triage and report standards, chain-specific hunting guides, and an MCP integration for Solidity review.

It exists because reproducibility is the job. Anyone on a team can follow it and reach the same verdict on the same code.