arashrahmaniii

Smart Contract Auditor & Security Researcher

Smart contract auditor and security researcher. I audit DeFi protocols end to end: the contracts themselves, upgrades and proxies, oracles, bridges and cross-chain config, access control, and the admin keys and roles behind them. Every finding I report comes with a runnable Foundry PoC on a forked chain. Recent work: Gavel Protocol (lending), a forced-default bug in the repay path, acknowledged and published as KI-3; Firelight, a published High (claims-queue DoS); Sky (ex-MakerDAO), 31 production contracts verified against their audits; upgrade reviews for Beanstalk, GMX v2, Twyne and Kinetiq; ZKsync OS, a VM differential fuzzer against REVM (fix submitted in PR #758). 40+ live protocols reviewed (lending, perps, LSTs, bridges, AMMs, launchpads) across EVM/Solidity, Rust (Solana) and Clarity. Based in Iran, working remotely. Open to remote audit and security roles, full-time or contract.


Experience: 1 year

Yearly salary: $60,000

Hourly rate: $40

Nationality: 🌏 Remote

Residency: 🌏 Remote


Experience

Independent Smart Contract Auditor & Security Researcher
Self-employed
2025 - 2026
Independent security audits of live DeFi protocols: smart contracts, upgrades and proxies, oracles, bridges and cross-chain config, access control and admin-key setups. Every finding backed by a Foundry PoC on a forked chain. Gavel Protocol (lending): forced-default bug in the repay path, acknowledged and published as KI-3. Firelight: published High (claims-queue DoS). Sky (ex-MakerDAO): verified 31 production contracts against their audits. Upgrade reviews for Beanstalk, GMX v2, Twyne and Kinetiq. ZKsync OS: VM differential fuzzer against REVM; fix submitted in PR #758. 40+ protocols reviewed across EVM, Rust and Clarity. Also built and audited my own AMM and lending protocol (Foundry, fuzz + invariant tests).

Skills

defi
ethereum
python
rust
security
solidity
english