← full work·private engagements·recent-first·NDA-aware
~/work/private
The work behind the reputation: private audits, firm-side reviews, and formal verification across Move, Rust/Solana, and EVM — with dates, partners, scope, and public proof wherever disclosure permits.
// newest first where engagement months are public · confidential dates remain explicitly marked
A private report should not make the experience invisible. This ledger shows the systems reviewed, the security focus, and the firm relationship without disclosing client-confidential material. Repeated protocols and multi-part reviews are consolidated so the signal stays clear.
Disclosure policy: named work below is already public in this portfolio or a published report. “Private report” means the deliverable remains under NDA. References and redacted samples can be shared during scoping where permitted. bounty-triage work is catalogued separately →
30 engagements shown
/ 2026
6 engagements
DateEngagementSecurity focusPartnerDisclosure
Datepublished report
Engagement
WaterX
Sui MoveEVM3 scopes
Security focusPerpetuals, prediction markets, and backed credit/mint-redemption flows with Wormhole bridge support.
Security focusWearable DePIN and health-reward infrastructure, including authorization and token flows.
1 M2 L
Partner
Direct / private
DisclosureNDA-protected
Dateclient confidential
Engagement
star-dot-fun v2
Rust / Solanalaunchpad
Security focusLaunchpad lifecycle, token creation, authority boundaries, and asset movement.
Partner
Adevar Labs
Disclosureprivate report
Need this depth on your protocol?
Share the repository, target chain, launch date, and the risk areas keeping you up at night. I’ll reply within 24 hours with fit, scope, and availability. Scoping is free.