cawfree

Executed multiple independent smart contract audits on behalf of Halborn, remedying critical vulnerabilities in smart contract protocols which are now trusted to safeguard millions. Solidity / Foundry / Yul / Huff

Responsible for (85 → 99.8)% onchain success rate for EVM-based chains through MEV elimination, multicall-based RPC request reduction, restrategizing transaction pricing to eliminate stuck transactions during periods of high congestion whilst conserving cost through analytics-driven backtesting, and increasing overall confidence in high-precision onchain actions in complex accounts. Helped maintain in-house chain indexer and transaction pool - with a focus on identifying and resolving unexpected state transitions that result in incorrect worldviews. As an onchain sleuth, would uncover critical issues in first and third party contracts, conduct detailed investigations of money flows and characterize/circumvent novel scam addresses and tokens. Delivered prototypes for a Rust-based multi-asset cryptographically-secure clear Ledger signer, an atomically selfdestructing EIP-7702 delegation bundle and a novel method for parallelizing high-performance cryptographic calculations on mobile platforms via React Native JSI and Web Crypto. Introduced and maintained a comprehensive fork testing framework to help safeguard against low-level regressions tailored to internal conventions.

Leading the delivery of a scalable, CAIP-compliant blockchain-agnostic mobile wallet. Implemented cross-platform mobile integration for ZK Identity proving technology using Polygon ID and oversaw the execution of a mobile application security audit in preparation for mainnet launch. Android / iOS / Web

Implemented smart contracts for NFT-based ERC-20 escrow using a bespoke bonding curve alongside supporting UX.

In the year spent as a freelance security searcher, I scored multiple first places at Sherlock and CodeHawks, claimed bug bounties at Immunefi and responsibly disclosed vulnerabilities in three live protocols. I'm experienced in governance manipulation, exploiting accounting inconsistencies (i.e. rounding errors and precision loss), vault share manipulation and the co-ordination of economic attacks using flash loans. I also engaged in multiple private engagements with protocol developers, ranging from hedge fund management to digital asset fractionalization. Solidity / TypeScript / Foundry / Hardhat

Migrated the classical Ethereum L1 product stack into generalized EVM interoperability. Led multiple initiatives to address cross-stack technical debt, implementation ambiguity and significant engineering bottlenecks. Increased performance and generalization of NFT metadata handling at scale and reduced overall service and compute costs. Introduced continuous integration pipeline alongside automated deployment of scalable backend configuration using cloud infrastructure-as-code. Designed and implemented third party platform integration plugin specification and modernized the public-facing rentals SDK. Vetted third party ERC20 token integrations for potential incompatibilities, vulnerabilities and exploits. Researched and reported on emergent patterns in the token rentals paradigm. JavaScript / TypeScript / Solidity / Python / Docker / AWS / Terraform

Founding developer of Geo, the Web3 browser and knowledge graph app. Responsible for the delivery of a bespoke multi-platform rich content editor comprising of custom animated gestures, navigation systems, an IPLD transformation architecture, IPFS client, content differencing algorithms, decentralized voting systems and an off-chain indexer. Orchestrated stealth release deployment onto Polygon. Maintained The Graph's frontend's mobile wallet integration in preparation for subgraph curation mainnet. JavaScript / TypeScript / GraphQL / React Native / ORM

Implemented internal-only compile-time tooling focused on defending against supply-chain dependency injection attacks, released plugins for constrained module resolution and increased codebase compliance with TypeScript and modern React APIs. Overhauled Rainbow Wallet's NFT metadata handling engine to support rendering video, audio and model object content via tokenURIs. JavaScript / React Native