ðž tintinweb
ðĢ Sushi hacking Security Panda
ðĨ Security Researcher | ðĨ· Smart Contract Auditor | âĻ Tool Builder
$ whoami
ð I am a security researcher specializing in smart contract auditing and blockchain protocol analysis. I identify vulnerabilities in complex systems and develop tools to improve ecosystem security.
ðĄïļ I'm active in responsible disclosure with rankings on Ethereum Bug Bounty Leaderboards: #13 Execution Layer and #16 Consensus Layer. I've disclosed 25+ CVEs across critical systems including Ethereum clients, Android AOSP, OpenSSH, and various network protocols.
ð My research focuses on cryptographic implementations and distributed system security. I hold an M.Sc. in Computer Science with specialization in security and cryptography.
I break things (responsibly):
- ð§ Smart Contracts & DeFi Protocols
- ð§ Blockchain Infrastructure (Ethereum, Bitcoin)
- ð° Network Protocols (SSL/TLS, DHCP, SSH)
- ðŽ Mining Software & Cryptocurrency Tools
- ðŠ Mobile Security (Android AOSP)
- ðĨ§ Web Applications & Browser Security
Nom nom nom nom nom ...ðŋïļ
$ break --things
ð Security Research
ðŧ Development
ð ïļ Tools & Platforms
ðŪ Interactive Demo
contract VulnerableContract {
mapping(address => uint256) public balances;
function withdraw(uint256 amount) public {
// @audit-issue: Missing checks!
require(balances[msg.sender] >= amount);
// @audit-issue: Reentrancy vulnerability!
(bool success,) = msg.sender.call{value: amount}("");
require(success);
balances[msg.sender] -= amount; // State change after external call!
}
}ð Audit Results
$ ~/portfolio
Security-centric syntax highlighting and advanced Solidity code insights for VS Code
Integrating Ghidra/IDA Pro into Visual Studio Code for seamless reverse engineering
SSL/TLS layers for scapy - the interactive packet manipulation tool
ðĶðīðīðīðĶ A home for ethereum smart contracts
Ethereum EVM bytecode disassembler and static/dynamic analysis tool
$ ~/research.log
ConsenSys Diligence Staff Researcher
2019-2025 âĒ 6+ Years
Staff Security Researcher conducting comprehensive smart contract audits for major DeFi protocols and Web3 infrastructure
Featured Audit Reports
IPFS Ecosystem Security Research
2021
Comprehensive security analysis of IPFS infrastructure discovering multiple critical vulnerabilities in Web3 development tools
DeFi & Web3 Platform Security
2021
Responsible disclosure of critical governance and infrastructure vulnerabilities in major DeFi platforms
Programming Language Security Research
2020-2021
Systematic security analysis of Nim, Python, and PHP standard libraries resulting in multiple CVE assignments
Ethereum Protocol Vulnerabilities
2020-2021
Discovery of critical DoS vulnerabilities in Ethereum 2.0 Teku and Trinity clients affecting network stability
EIP-1963: Mandatory Security Considerations
2019
Authored Ethereum Improvement Proposal mandating comprehensive security reviews for all protocol changes
Security in EIP Process
Ethereum Core Devs Meeting âĒ 2019
Presented recommendations for enhancing security considerations in Ethereum protocol governance, leading to EIP-1963 adoption
Joined ConsenSys Diligence Team
2019
Began professional smart contract auditing career with ConsenSys Diligence, one of the premier blockchain security firms
Android Security Research
2016-2018
Systematic analysis of Android AOSP discovering critical vulnerabilities in core system components and applications
Ethereum Bug Bounty Program
2016-2023
Extensive vulnerability research in Ethereum clients earning top positions on official leaderboards
SSL DROWN Attack Discovery
2016
Contributed to the discovery of the DROWN attack affecting millions of HTTPS servers worldwide
Network Protocol Vulnerabilities
2013-2020
Comprehensive security research across critical network protocols and applications
ðŊ Research Impact
Protocol Security
Enhanced Ethereum protocol security through EIP-1963 and client vulnerability discoveries
Ecosystem Protection
Secured Web3 infrastructure including IPFS, DeFi protocols, and development tools
Language Security
Systematic analysis improving security of programming language standard libraries
Responsible Disclosure
Ethical vulnerability research protecting millions of users and billions in assets
$ ./impact-analyzer --generate-report
ðŊ CVE Discovery Timeline
ð Affected Systems & Technologies
Blockchain
Mobile Systems
Network & Crypto
$ ping tintinweb
Let's break things together! ðž
Interested in security research, smart contract auditing, or just want to chat about pandas and sushi?
â Support the Work
Be a Hero, tip a ðš ð - Your support helps fund security research and open source tools!