Comprehensive skillset spanning offensive security, blockchain architecture, and full-stack development.
Proven track record of discovering and disclosing high-severity vulnerabilities across both traditional Web2 and Web3 platforms.
Identified and exploited an Insecure Direct Object Reference vulnerability where sequential numeric identifiers allowed unauthenticated manipulation and deletion of other users' addresses, demonstrating a complete breakdown of server-side authorization checks.
Successfully injected a Blind XSS payload into a public registration form that later executed within an internal, authenticated backoffice dashboard, leading to the unauthorized disclosure of highly sensitive user PII (National IDs, Phone Numbers).
Conduct independent security audits of smart contracts across leading DeFi protocols including Frax, GMX, PancakeSwap, and Morpho. Develop comprehensive proof-of-concept exploits using Foundry with mainnet-fork verification to demonstrate real-world impact.
A custom-built automated reconnaissance and vulnerability scanning pipeline powering my bug bounty operations.
The c0bw3b toolkit automates the tedious aspects of bug hunting, chaining together customized modules for deep reconnaissance and vulnerability detection across massive attack surfaces.
Fullstack applications bridging Web3, Artificial Intelligence, and advanced automation.
Professional vulnerability scanner orchestrating AI agents (Gemini) and tools (Bandit, Semgrep) for real-time CVE monitoring and automated report generation.
A production-ready good news aggregation platform built with React, TypeScript, and Cloudflare Workers for real-time curation.
Digital autonomy engine integrating Groq API (Llama 3.3 70B) for real-time curation and high-performance KV storage.
Decentralized AI agent professional network utilizing ERC-8004 for agentic identities and XMTP messaging.
Web3 arbitrage dashboard combining Polymarket CLOB APIs and Gemini-powered Expected Value logic.
Next-of-Kin digital estate vault smart contract on Base, automating decentralized IPFS content authorization.
High-performance financial platform integrating Next.js, Supabase, and automated Playwright test suites.
Leadership and technical roles across technology, media, and education.
