Found 1 High severity bug in a cross-chain TITN token contract. A `to != lzEndpoint` exemption in the transfer-lock check created an escape hatch. Restricted holders could route tokens through the LayerZero endpoint and bypass the lock entirely. First contest, first finding.

Found 2 High severity bugs in a 128-bit floating-point Solidity library. Key finding: ln(0) did not revert, silently returning an invalid result, violating mathematical invariants and exposing dependent protocols (AMMs, lending rates) to silent precision errors.

Found 1 Medium severity bug in the FERC20 token contract. `burnFrom()` reduced user balances without decrementing `_totalSupply`, permanently inflating the reported circulating supply and breaking the core ERC20 accounting invariant.

Aave V3 adapted to Stellar Soroban. 81 files of Rust, the only non-Solidity review here. Worked it as a differential audit: which EVM assumptions did the port carry across that Soroban does not provide. One finding confirmed; details withheld while the code is live.

Replaces V1 Uniswap routing with a permissionless Dutch auction settling through CowSwap. Reviewed price-descent timing, the auction callback boundary and PriceManager staleness handling.

Concentrated-liquidity AMM built on a singleton architecture with pluggable extensions. 92 files. Focused on cross-pool accounting isolation and what an extension can reach from its hook points.

Jackpot protocol with NFT tickets, LP-funded prize pools and Pyth entropy. Reviewed entropy timing, modulo bias in Fisher-Yates rejection sampling, and the combinatorial payout accounting LPs underwrite.

Multichain intent rails, a separate contest from the Ecosystem Wallet. Nine files including a dedicated DelegatecallGuard. Reviewed delegatecall containment, intent binding and replay across chains.

V3 non-custodial smart wallet using passkeys, timed recovery and Merkle-proof configuration. Reviewed configuration integrity, session permission escape and cross-chain signature replay.

Leverage markets using the collateral itself as liquidity. Concentrated on the oracle adapter layer: cross-adapter staleness composition and the mismatch between Chainlink push and Pyth pull semantics.

Brings XRP and other non-smart-contract assets into DeFi via attestation-backed minting. 120 files, the largest scope I have reviewed. Focused on attestation replay and the redemption default path.

Lido's permissionless staking module. 34 files covering bond accounting, exit penalties and beacon-chain Merkle verification. Scope was CSM (~8.5% of Lido TVL), not the core stETH pool.

On-chain claim mechanism for the Chainlink BUILD program, a two-file scope against a $200k prize pool. Reviewed double-claim paths, the early-claim discount curve, and factory-to-claim solvency accounting.

URL tokenisation and swaps in 379 lines, the smallest scope I have reviewed. The contest closed with zero Highs and zero Mediums found by anyone who entered.

HYPE liquid staking split across HyperEVM and HyperCore. Reviewed buffer coherence between the two layers, withdrawal-queue ordering under slashing, and oracle-driven validator rotation.

Campaign platform paying rewards for token holding. Reviewed the reallocation accounting every reward rests on, flash-loan-shaped holding around sampling boundaries, and griefing of the payout path.

ERC-4626 meta-vault distributing deposits across multiple lending markets. Reviewed allocation invariants, reward accrual across share movements, rounding direction and the forced market-removal path.