Not really a "portfolio" or a CV, more of a list of things I've been working on lately...
Enjoy 😊
Auditing
Deep reviews of protocols I've been helping secure lately.
Proof-carrying data (PCD) framework
Review of Ragu, a new PCD (proof-carrying data) toolkit for Zcash's new Tachyon shielded protocol. Ragu enables recursive proving with the Pasta curve cycle.
Part of Project Tachyon, Zcash's scaling initiative.
Private trading protocol
Review of Silhouette, a private trading protocol built on HyperEVM (Hyperliquid) using TEEs (AWS Nitro Enclave).
Digital identity protocol
Review of Self, a privacy-preserving identity protocol that allows users to prove their identity through their passport while selectively disclosing only chosen fields.
Scope
Cross-chain messaging protocol
Review of Hyperlane's Aleo implementation, the main interoperability bridge on Aleo. Hyperlane is a universal cross-chain messaging protocol deployed across many chains.
Scope
Post-quantum proof system
Review of a LaBRADOR implementation, a cutting-edge post-quantum proof system based on lattice assumptions, offering an alternative to pairing-based SNARKs.
Data availability sampling protocol
Review of Celestia's ZODA implementation, a new data availability encoding protocol that is significantly more efficient than KZG-based approaches, powering Celestia's Fibre Blockspace upgrade.
Private token
Review of the implementation of the Confidential Transfers extension for the "Token Extensions Program" (Token 2022)
Scope
Proof of solvency
Proof of solvency protocol for centralized exchanges.
I also wrote a detailed code walkthrough of:
A private dating app where matches are computed under MPC, so no one (not even the server) sees your preferences
Prove your ID is valid and your income covers the rent, without handing your documents to a landlord
WebAssembly-friendly Noir SDK, to make in-browser zkTLS web proofs practical
Recursive proving in Noir
A hands-on playground for learning the mpz MPC framework, ported to the latest version of mpz
Building a STARK step by step in SageMath, to really understand how the protocol works
A soundness bug in PSE's Halo2 lookup_any: a malicious prover could satisfy a lookup that should fail
Finished as a top fellow in Electisec's ZK security fellowship, auditing real ZK circuits
A ready-to-go Halo2 project template, with testing wired up from day one
How Halo2 circuits go wrong: common soundness bugs, with circuits and tests that catch them
A Mock Prover feature that emulates a malicious prover by tampering with cell values
A from-scratch reimplementation of Tornado Cash in Halo2, with a detailed write-up of the circuits
Low-level security, self-taught: from binary exploitation to kernel exploits
Contributed several cheatcodes and a Chisel improvement to Foundry
Placed 1st in the first cohort of Secureum's smart-contract security bootcamp
The very first cohort of what became one of the best-known smart-contract security bootcamps.
See the bootcamp contentCore contributor to Angle, the leading decentralized euro stablecoin
A full-stack decade: from mobile apps to cloud infrastructure to cryptography