A living research space — explorations in Solidity, DeFi mechanics, zero-knowledge proofs, and cross-chain design. Notes are published on LinkedIn.
Security Research
Competitive smart-contract security reviews on Code4rena, Sherlock, and HackenProof — auditing DeFi protocols for vulnerabilities under contest conditions.
Reactive Network lets contracts subscribe to specific event topics instead of listening to everything — event-specific listeners, multi-chain contracts, and cross-chain relays that inspire reactive security architectures.
Revert strings vs custom errors: weighing readability against the structured, gas-efficient approach for production smart contracts. Includes a repo with examples and tests.
Most contracts don't get hacked — they get misconfigured. Replacing the single-owner model with defined roles (Admin, Operator, Bot) using OpenZeppelin's AccessControl, so each key can do only what it should.
Why two-step ownership transfers (transferOwnership + acceptOwnership) are safer than a single call — ownership changes are high-risk and deserve a deliberate, controlled process.
The five pieces of a ZKP — prover, verifier, circuit, witness, public inputs — walked through with a KYC example where a bank validates compliance without seeing personal data.