Personal DeFi / smart contract security research: protocol risk assessments, static analysis, and post-disclosure incident write-ups.
- Morpho Blue - Full protocol risk assessment covering admin control, governance, dependencies, oracle risk, and economic security, with quantitative Risk Radar scoring.
- Morpho Blue - Slither static analysis walkthrough: detector findings, false positives, and manual review notes.
Post-disclosure ("1-day") incident write-ups with root-cause analysis and mainnet-fork PoC reproduction.
- Kelp DAO (rsETH) - LayerZero DVN compromise, ~$290M cross-chain bridge drain
- Penpie - $27M cross-contract reentrancy via a malicious Pendle market
- Sonne Finance - Empty-market donation attack on a Compound V2 fork, ~$20M
- Stream Finance (xUSD) - Recursive-looping insolvency and oracle-frozen bad debt, ~$93M