001Aug 2026
[redacted]
Two-week protocol security review
Sherlockprivate delivery
NDA-protected
~/work
Research that survives scrutiny.
Every engagement I can name, in one ledger — flagship protocol reviews, firm-side private delivery, competitive research, formal proofs, and bounty triage across Move · Rust · Solidity · Cairo · Sway · FunC · Go.
- 74 records in the ledger
- 33 private & firm-side engagements
- 12 top-ten contest finishes
- 10 partner security firms
# selected_proof
The work behind the signal.
Three snapshots from the ledger: competitive research, private depth, and production protocol review.
open the full proof explorerAave
Flagship lending protocol research with a public report and actionable findings.
1 H1 Mreported finding set ↗
02 / private depth
Sui · CLOB · leverage
03 / multi-surface
Sui · EVM · bridge
DeepBook
Firm-side review of a decentralized order book with margin and leverage surfaces.
privateThree Sigma deliveryWaterX
Credit, bridge, perpetuals, and prediction-market surfaces across a live protocol suite.
3+systems reviewed ↗# proof_explorer
Find relevant experience
// one query across all 74 records · protocols, ecosystems, firms, categories, and review types. Private delivery, contest research, and triage stay clearly separated.
Showing all 74 proof records
Filters and search compose. Sections below hide themselves when nothing inside them matches — try lending, oracle, perpetuals, or a firm name.
No matching work yet. Try another ecosystem, protocol, firm, or review type.
#02 move_ecosystem
Move — Sui, Aptos & Movement
// primary focus ecosystem · object model, abilities, capability boundaries, PTB composition
$ ls ~/audits/move/ 13 records
002Jul 2026
[redacted]
Large-scope protocol security review
Three Sigmaprivate delivery
NDA-protected
003
Aave
lendingFlagship lending protocol
Cantinapublic contest
1 H1 M
↗ report
004
DeepBook
CLOB · marginDecentralized central limit order book with margin and leverage
Three Sigmaprivate delivery
private
005Aug 2025
Elixir
staking · vaultMulti-chain staking vault
Pashovprivate delivery
5 M10 L
↗ report
006
Abyss
yieldYield aggregator
Three Sigmaprivate delivery
private
007
LayerBank
lendingLending and borrowing protocol
Sherlockprivate delivery
private
008Jan 2026
Matrixdock
RWA · cross-chainTokenized gold (XAUm) with cross-chain transfer surfaces
Cyfrinprivate delivery
009
Decibel
perpetualsOnchain perpetual futures engine
Sherlockprivate delivery
private
010Jun 2026
WaterX Perps
perpetualsPerpetual futures venue
Adevar Labsprivate delivery
011Jun 2026
WaterX Credit / Bridge
credit · bridgeBacked USDX mint/redeem credit system with Wormhole EVM bridge support
Adevar Labsprivate delivery
012Jun 2026
WaterX Prediction
prediction marketBroker-layer prediction market giving Sui users Polymarket exposure
Adevar Labsprivate delivery
013
Private Move bounty triage
bounty validationFirm-side validation across live bounty scopes; validated findings turned into deterministic reviewer-ready PoCs
Pashovtriage role
#03 rust_solana
Rust & Solana
// Anchor and native programs · account validation, PDA derivation, CPI boundaries, SPL / Token-2022
$ ls ~/audits/rust/ 8 records
014
Tensor
NFT · AMMSolana NFT marketplace with an automated market maker
Cantinapublic contest
2 H1 M
↗ 3rd place
015
StarVault
crowdfundingCrowdfunding platform on Solana
Adevar Labsprivate delivery
2 H9 M8 L
private report
016
ImpossibleFinance / Rarible
Token-2022 · marketplaceNFT marketplace triage on Token-2022 extensions
Zenithtriage role
2 C1 H
↗ triage
017
star-dot-fun v2
launchpadToken launchpad
Adevar Labsprivate delivery
private
018
Centrifuge
RWAReal-world-asset tokenization infrastructure
Cantinapublic contest
1 M
↗ report
019
Cudis
DePINWearable DePIN with health-data reward accounting
Privatedirect engagement
1 M2 L
private report
020
CrunchDAO
DAO · marketplaceData marketplace and DAO tooling
Accretionprivate delivery
private
021Mar 2026
Oro
RWA · goldGold-backed real-world-asset infrastructure
Adevar Labsprivate delivery
#04 private_audits
Private Engagements
// delivery as a private or firm-side auditor—not contest participation · seven recent scopes below · the complete 33-entry ledger lives on its own page
- 33private review scopes
- 7partner firms
- 3core ecosystems
- 2025→active delivery
Confidential by default. Specific where permitted.
Client names and public reports appear only where disclosure is already authorized. Private reports stay private; references and redacted work samples are available during scoping.
$ head -7 ~/audits/private/ledger 7 of 33
022
[redacted]
Two-week review of a Move protocol on Movement — resource and capability safety, authorization boundaries, and state consistency across module entry points.
Sherlock
NDA-protected
023
[redacted]
Large-scope Sui Move protocol review focused on protocol invariants, capability and authorization boundaries, asset safety, and cross-module state transitions.
Three Sigma
NDA-protected
024
Mentat Minds BtLending
Bittensor lending with TAO liquidity, subnet collateral, dual-EMA oracles, liquidation, and deregistration settlement.
BurraSec
NDA-protected
025
[redacted]
Multichain stablecoin expansion covering L2 minting, staking, redemption, bridging, and reserve-to-supply reconciliation.
Three Sigma
NDA-protected
026
WaterX
Sui perpetuals, prediction markets, and a backed credit system with EVM/Wormhole bridge support.
Adevar Labs
027
ORO Protocol
Gold-backed RWA infrastructure on Solana, reviewed across protocol accounting and token flows.
Adevar Labs
028date private
Decibel
Aptos perpetuals trading engine — order lifecycle, margin, liquidation, risk logic, and formal properties.
Sherlock
private report
#05 formal_verification
Formal Verification
// mathematically proving protocol invariants rather than sampling for counterexamples · Certora CVL, Sui Prover, Move Prover
$ ls ~/audits/fv/ 3 records
029
Current Sui
lendingSui DeFi lending protocol — invariant specification and proof
Sherlockprivate delivery
private
030
Spicenet Solidity
delegationSpicenet Delegate contracts — rule authoring and verification
Pashovprivate delivery
private
031
Decibel on Aptos
perpetualsPerpetual futures trading engine — global markets, onchain
Sherlockprivate delivery
private
✓Certora CVL
✓Sui Prover
✓Solidity FV
✓Move Prover
#06 public_contests
Public Contests
// independent competitive research—not private client delivery · Cantina, Sherlock, Code4rena, CodeHawks · 12 of 19 finished top ten
$ ls ~/contests/ | sort -r 19 records
032Jun 2026
Polygon Heimdall V2
consensus clientPolygon PoS consensus client rewrite
results pendingSherlock
26 accepted
033
Arcade
NFT lending
🥈 2nd place
1 M
034
Aave
Lending on Aptos
🥉 3rd placeCantina
1 H1 M
035
Tensor
NFT AMM
🥉 3rd placeCantina
2 H1 M
036
Velvet v4
Asset management
🥉 3rd place
6 H7 M
037
Venus
Governance
🥉 3rd place
9 L
038
Juicebox
Onchain treasury
🥉 3rd place
2 M8 L
039
RedStone
Oracle
6th place
1 H1 M1 L
040
Chorus One
Staking
7th place
1 H
041
stake.link
Liquid staking
8th place
1 H3 L
042
Bima
Liquity fork
8th place
1 H3 M
043
Starknet Staking
Staking
9th place
1 H1 M1 L
044
Dahlia
DeFi
10th place
4 M
045
Opal
DeFi
12th place
1 H7 M2 L
046
Centrifuge
Real-world assets
12th placeCantina
1 M
047
Farcaster
Social protocol
17th place
2 M
048
MightyFi
DeFi
20th place
6 H3 M
049
ArkProject
NFT bridge
20th place
1 H2 M1 L
050
Chakra
Cross-chain settlement
unranked
2 H
#07 bounty_triage
Bug Bounty Triage
// firm-side validation role—not an authorship claim for submitted reports · severity validation, PoC reproduction, duplicate consolidation, reviewer handoff
$ ls ~/triage/ 21 records
051
Noise Sequencer
trading sequencerOff-chain sequencer for market, funding, PnL, ADL, withdrawal, and NAV settlement
ZenithTriager
internal
86 findings triaged · 2 High and 40 Medium finalized · duplicates and invalid reports consolidated
052
Starknet Privacy
privacy poolPrivacy pool, discovery service, and SDK
ZellicTriager
internal
Triage complete · 4 highest-severity findings reviewed for validity and realistic severity
053
Metronome Synth
synthetic assetsCollateralized synthetics, rewards, and cross-chain surfaces
ZenithTriager
internal
Priority finding validation · exploitability and severity review
054
3Jane Money Market
lending · vault · oracleUnsecured credit money market with USD3/sUSD3 vaults and borrower-specific rates
ZenithTriager
internal
4 highest-severity findings reviewed · validity and severity notes
055
Lido
liquid stakingEasy Track governance, accounting oracle, council daemon, and validator ejector
ZenithTriager
internal
5 findings reviewed · 1 clear Medium, 4 Low / conditional Medium · PoC-backed validity and severity triage
056
Rails (Liquidity Vault)
managed vaultXLM collateral with USDT0 yield accounting
ZellicTriager
internal
2 valid, 1 invalid · PoC-backed notes
057
Royco
yield90 contracts · ~18.4k LOC
Pashov Audit GroupVerified / Triaged
058
Balancer v3
DEX110 contracts · ~25.3k LOC
Pashov Audit GroupVerified / Triaged
059
Optimism — Fault Proof
fault proofOP Stack · ~12.5k LOC
Pashov Audit GroupVerified / Triaged
060
ImpossibleFinance / Rarible
marketplaceToken-2022 NFT marketplace
ZenithTriager / Verified
061
Divvy.bet
bettingTournament CPI and house programs
ZenithTriager / priority review
062
Ladder Markets
DeFiAsynchronous tranche withdrawals
ZenithTriager / Verified / PoC
063
Sui Seal
Cryptography
PashovTriager / PoC
064
Sui Framework — Staking
Staking
PashovTriager / PoC
065
Aptos — Crypto
Cryptography
PashovTriager / PoC
066
Scallop
Lending
PashovTriager / PoC
067
Walrus
Storage infrastructure
PashovTriager / PoC
068
Kai Finance
Lending
PashovTriager / PoC
069
Navi
Lending
PashovTriager / PoC
070
Astros
Perpetuals
PashovTriager / PoC
071
Aave V3 Origin
lending marketReserve accounting, oracle, liquidation, incentives, governance/configuration, and upgrade paths
ZenithTriager
internal
38 High-severity candidates reviewed · exploitability, freshness, duplicates, trust assumptions, and realistic severity validated
#08 bug_bounties
Independent Disclosures
// my own vulnerability reports to L1/L2 programs · submitted outside any firm engagement
$ ls ~/bounties/ 3 records
072
Decibel
confirmed & rewardedPerpetual futures engine
1 C2 H5 M
private program
073
OpenZeppelin
public · CVE-2024-45304Cairo contracts library
1 M
074
ZKsync Lite
acknowledgedReported as a known issue
1 C
—
Where a row says private, that is the disclosure status — not the depth of the work.
Roughly half this ledger sits behind client confidentiality. References and redacted samples are available during scoping.