tejanadh

Independent Smart Contract Security Researcher specializing in low-level systems (Rust/Solana) and complex DeFi protocols (Solidity). Multiple high/critical findings across production protocols on Solana and Ethereum, with public PoCs and source-backed writeups.

Key findings & PoCs:
• ERC-4337 EntryPoint v0.8: Critical — postOp OOG charges paymasters beyond paymasterPostOpGasLimit (EIP-4337 upper bound). PoC: https://github.com/Tejanadh/entrypoint-poc
• Kamino / Scope: High — derived oracles (JLP, Jito VRT) stamp DatedPrice with refresh Clock, not source observation time; defeats KLend age checks after permissionless refresh. Live RPC verification: https://github.com/Tejanadh/kamino-security-research
• Symbiotic BaseSlasher: High — slash accounting desync / phantom cumulative slash when onSlash return is ignored (shared vaults). PoC: https://github.com/Tejanadh/symbiotic-critical-research
• DEXE Governance: High — delegateTokens missing ifNotStaken allows stake + delegate double-use of voting power. PoC: https://github.com/Tejanadh/dexe-gov-bug-report
• 1inch Solana: High (privileged) — rescue_funds_for_order path issues after order close (whitelisted resolver). PoC: https://github.com/Tejanadh/1inch-solana-rescue-theft-research
• Hyperbridge: High — remote-call signature payload omits StateMachineId (cross-chain replay class). Other decimal/timeout claims researched with honest scope notes. Writeup: https://github.com/Tejanadh/hyperbridge-security-research
• Jupiter Lend / Ethena / EigenDA: additional research (design-risk oracle asymmetry, latent nonce truncation, fail-closed cert analysis).

Skilled in Rust (Solana) and Solidity. Experienced building deterministic PoCs on mainnet forks (Foundry, Anchor, solana-test-validator) and working with protocol teams on fixes.

Actively looking for remote Smart Contract Security Researcher / Auditor roles (full-time, part-time, or internship) with audit firms and protocols.