Security Research & Engineering
Selected research work.
Selected security research handled through private reporting and coordinated disclosure. Technical reports, reproduction details and non-public findings remain confidential.
Authorised vulnerability research across applications, protocols and digital infrastructure, including crypto and Web3 systems. Technical validation and tool development within agreed scope, with confidential reporting.
| Project | Research area | Confirmed status |
|---|---|---|
| Metaplex | Authorisation and application security | Resolved |
| Anza / Agave | Resource management in the validator client | Fix shipped, all clusters |
| SPL Token-2022 | State management in the token program | Resolved |
| Nervos CKB | Protocol data processing | Resolved |
| Ledger | Stellar application security | Resolved |
| Conflux | Transaction handling in SDKs | Resolved |
Project names identify research contexts, not clients, partnerships or endorsements. Non-public work and technical evidence remain confidential.
Discuss your project.
A short project description is enough: the systems involved, your goal and an approximate timeframe. I read your enquiry and agree the next steps with you.
Please do not send credentials, private reports or client data in an initial enquiry.