Work
Selected engagements since 2020, newest first. Public reports are linked where they exist; clients under NDA are listed as undisclosed.
Engagements before 2024 were performed at Consensys Diligence. Those reports carry their brand and my name. Everything since 2024 is independent work, some of it with partner firms.
| Date | Client | Engagement | Via | Note |
|---|---|---|---|---|
| OnRails cSOL Bridge | Code review | Consensys Diligence | Smart contracts of a Solana-Canton bridgerust | |
| Opal DEX | Code review | Fortuna | Base smart contracts and the off-chain infrastructure around themdexrusttypescriptbackend | |
| undisclosed | Penetration test | Kauz | Web applications and off-chain infrastructure of a multi-chain wallet providerapimobilekey-management | |
| New Market Trading | Code review | Consensys Diligence | Frontend, external and internal APIsweb-appapicustody | |
| ZenChain | Code review | Consensys Diligence | A full L1: frontends, bridge, staking, indexer and airdropl1web-appapibackendcross-chain | |
| undisclosed | Penetration test | Kauz | Web applications of a mid-sized German deathcare facilitytypescriptexternal | |
| undisclosed | Incident response | Kauz | Organizational consulting for a blockchain data propagation protocolinfrastructureoperations | |
| zkLighter | Penetration test | Creed | External web attack surface of a ZK-rollup exchangeweb-appdexcryptography | |
| World Markets (MegaETH) | Code review | Creed | Smart contracts on MegaETHsolidity | |
| Ern Mitigations | Code review | Creed | Mitigation review for the Ern yield protocol, formerly BitYieldsoliditydefi | |
| Ern | Code review | Creed | Smart contracts of the Ern yield protocol, formerly BitYieldsoliditydefi | |
| Everclear Swaps | Code review | Creed | Swap contracts of the cross-chain intent settlement layersolidity | |
| Everclear Hub Upgrade | Code review | Creed | Hub upgrade of the cross-chain intent settlement layersolidity | |
| Ern f.k.a. BitYield | Code review | Creed | Smart contracts of the yield protocolsoliditydefi | |
| Lagoon | Risk assessment | Creed | ERC-7540 on-chain vault protocolsoliditydefi | |
| Quake Cash | Code review | Creed | Earthquake insurance/prediction prototypesoliditydefi | |
| Web3Auth | Code review | Creed | TOPRF secure backup systemgocryptographympc | |
| Web3Auth | Code review | Creed | SSS service for multi-party seed phrase recoverygocryptographympc | |
| undisclosed | Penetration test | Kauz | Meeting and employee scheduling system of a state government officeweb-appexternalpublic-sector | |
| Everclear Arbitrum Tokenomics | Code review | Creed | Token distribution contracts on Arbitrumsolidity | |
| Everclear v1.1 (Diablo) | Code review | Creed | Protocol upgrade to v1.1soliditycross-chain | |
| LucidLabs | Spot check | Creed | Integration of LucidLabs with Everclearcross-chainsolidity | |
| Everclear Tokenomics | Code review | Creed | Token distribution and vesting contractssolidity | |
| Across Protocol | Code review | Creed | Cross-chain bridge contractssolidity | |
| Puffer UniFi | Code review | Creed | Based rollup and pre-confirmation AVS contractssolidity | |
| RAA Sachsen e.V. | Threat modeling | Kauz | Organizational threat model for an NGO aid center for educational integration | |
| Everclear v1.0 (Chimera) | Code review | Creed | Launch review and mitigation check for v1.0soliditycross-chain | |
| Request Finance | Code review | Creed | Payment gateway and invoicing smart contractssoliditypayments | |
| undisclosed | Code review | Creed | A liquid staking derivative on Filecoinfevmsolidity | |
| TAFEL Dresden e.V. | Penetration test | Kauz | External web attack surfacengoweb-appphp | |
| undisclosed | Code review | Creed | An on-chain reputation protocol for verifiable talent sourcingsolidityidentity | |
| Hyperlane xERC20 | Code review | Creed | Integration of the xERC20 cross-chain token standardsolidity | |
| Puffer xERC20/VT Pricer | Code review | Creed | Cross-chain token and validator-ticket pricing contractssolidityxerc20restaking | |
| BakerFi | Code review | Creed | Leveraged staking vaultssoliditydefi | |
| Puffer | Code review | Creed | Mainnet contracts of the liquid restaking protocolsolidity | |
| Connext Vesting Wallet | Code review | Creed | Vesting wallet contractsolidity | |
| Bitsi | Feasibility analysis | Kauz | Architecture of a permissionless L2 connecting Ethereum and Bitcoin | |
| BakerFi | Code review | Creed | Leveraged staking vaultssoliditydefi | |
| Moonwell MIP-M23 | Code review | Kauz | Cross-chain governance contractssolidity | |
| xERC20 Standard | Code review | Creed | Reference implementation of the xERC20 cross-chain token standardsolidity | |
| Stadt.Land.Netz MyVIA | Penetration test | Kauz | External web attack surface | |
| Rocket Pool (Houston) | Code review | Consensys Diligence | Houston upgrade of the liquid staking protocolsolidity | |
| undisclosed | Code review | Consensys Diligence | Backend API and contract factory of an NFT-focused L1solidity | |
| Protocol Labs FilSnap | Code review | Consensys Diligence | MetaMask Snap for Filecointypescriptwallet | |
| undisclosed | Code review | Consensys Diligence | A WebAssembly module that filters malicious transactions in a large browser walletbrowser-extension | |
| undisclosed | Code review | Consensys Diligence | An Ethereum L2 rollup built on multi-party computation: all contracts, nodes and infrastructurempcsoliditycryptography | |
| EigenLayer | Code review | Consensys Diligence | Initial contracts of the restaking protocolsolidity | |
| undisclosed | Code review | Consensys Diligence | NFT ticketing and presale platformsolidity | |
| Rocket Pool (Atlas) | Code review | Consensys Diligence | Atlas v1.2 upgrade of the liquid staking protocolsolidity | |
| undisclosed | Code review | Consensys Diligence | A large UTXO-based proof-of-stake blockchainl1nodeconsensus | |
| undisclosed | Code review | Consensys Diligence | Smart contracts of a global investment firm and a cooperative of national bankssolidityfinance | |
| undisclosed | Code review | Consensys Diligence | Contracts and libraries of a leading Ethereum SSO providersoliditytypescriptidentity | |
| undisclosed | Code review | Consensys Diligence | Meta-transactions framework of a large game studio, based on ERC-7221soliditygaming | |
| Rocket Pool v1.1 | Code review | Consensys Diligence | Liquid staking protocol, v1.1solidity | |
| Arbitrum Nitro | Code review | Consensys Diligence | L2 core contracts, Nitro upgradearbitrumsolidityrollup | |
| Fuji Finance | Code review | Consensys Diligence | Cross-chain lending aggregatorsoliditydefi | |
| undisclosed | Code review | Consensys Diligence | A DeFi project providing humanitarian aid and UBI in emerging nationssolidity | |
| undisclosed | Code review | Consensys Diligence | NFT auction marketplace and royalty distribution platformsolidity | |
| undisclosed | Code review | Consensys Diligence | Governance and vesting contracts on an NFT-focused L1solidity | |
| undisclosed | Code review | Consensys Diligence | Second review for one of the largest custodial wallet providers and staking servicescustodybackendkey-management | |
| Arbitrum | Code review | Consensys Diligence | L2 core contractsarbitrumsolidityrollup | |
| Gluwacoin | Code review | Consensys Diligence | ERC-20 wrappersolidity | |
| 1inch Protocol v2 | Code review | Consensys Diligence | Aggregation Router v4solidity | |
| undisclosed | Code review | Consensys Diligence | One of the largest custodial wallet providers and staking servicescustodybackendkey-management | |
| undisclosed | Code review | Consensys Diligence | A Gnosis Safe module for distributed, dynamic DAO governancesolidity | |
| undisclosed | Code review | Consensys Diligence | A decentralized insurance market for DeFi liquidity crisessolidity | |
| undisclosed | Code review | Consensys Diligence | Reference implementation of a cross-chain token standardsolidity | |
| GrowthDeFi WHEAT | Code review | Consensys Diligence | Yield farming contractssoliditydefi | |
| undisclosed | Code review | Consensys Diligence | An options marketplace based on Kelly criterion bonding curvessoliditydefi | |
| undisclosed | Code review | Consensys Diligence | Collateral distribution module of a large algorithmic stablecoinsolidity | |
| undisclosed | Penetration test | Consensys Diligence | A traditional finance investment fund distribution platformweb-appexternal | |
| Rocket Pool | Code review | Consensys Diligence | Initial review of the liquid staking protocolsolidity | |
| undisclosed | Penetration test | Consensys Diligence | Chain abstraction layer of a cross-chain atomic swap platformweb-appapi | |
| undisclosed | Penetration test | Consensys Diligence | Oracle integration and marketplace of a large algorithmic stablecoinweb-appapi | |
| undisclosed | Penetration test | Consensys Diligence | Management systems and website of a global logistics providerweb-appexternal | |
| undisclosed | Code review | Consensys Diligence | Application generating hierarchical deterministic validator BLS keyscryptography | |
| undisclosed | Penetration test | Consensys Diligence | Key generation ceremony systems of a custodial staking providercustodyinfrastructurecryptography | |
| undisclosed | Penetration test | Consensys Diligence | Management systems and website of a global logistics providerweb-appexternal |