Portfolio

Selected security audits, cryptography projects, and open-source contributions.

Security audits

Cryptography, ZK proofs, and protocol implementations.

Zcash Tachyon

January 2026Proof-carrying data (PCD) framework

Review of Ragu's recursive proving toolkit for Zcash's Tachyon shielded protocol, built on the Pasta curve cycle.

Part of Project Tachyon, Zcash's scaling initiative.

Ragu blog postTachyon overviewePrint paperRagu book
Report coming soon
rustbulletproofsfoldingproof-carrying data

Silhouette

December 2025Private trading protocol

Private trading on HyperEVM (Hyperliquid), using TEEs backed by AWS Nitro Enclaves.

Report coming soon
rustTEEhyperliquid

Self

December 2025Digital identity protocol

Passport-based identity proofs with selective disclosure of personal information.

Scope

  • Circom circuits JWT verification from GCP TEE attestations
  • TEE server implementation
Report coming soon
circomTEErustidentity

Hyperlane

November 2025Cross-chain messaging protocol

Aleo messaging and token implementations for Hyperlane's cross-chain protocol.

GitHub repository

Scope

  • Aleo implementation of the protocol
  • Hyperlane native token implementation (Leo)
  • Hyperlane collateral token implementation (Leo)
  • Hyperlane synthetic token implementation (Leo)
View report
aleo

(confidential)

November 2025Post-quantum proof system

LaBRADOR implementation: a post-quantum proof system based on lattice assumptions.

LaBRADOR paper
Report coming soon
rustpost-quantum

Anza/Solana Token 2022 Confidential Transfers

September 2025Private token

Confidential Transfers extension for Solana’s Token Extensions Program (Token 2022).

Scope

  • ZK El Gamal proof program and SDK
  • Token 2022 confidential transfers extension
View report
solanarustsigmabulletproofs

Featured projects

MinaGuard

Mar 2026 – Apr 2026

A multisig wallet for Mina, built with o1js, where owners propose, approve, and execute transactions

zero-knowledgesecurity

co-match

May 2025

A private dating app where matches are computed under MPC, so no one (not even the server) sees your preferences

I built a Private dating app 🌶️ using TACEO's co-noir (experimental) tech.
It was a fun project to see what's possible with private shared state
App is probably down, but just in case if you want to take a look: co-match.vercel.app
mpcco-snarkstaceoprivacy

zk-tenant

Mar 2025

Prove your ID is valid and your income covers the rent, without handing your documents to a landlord

Built a PoC for French people to avoid sharing their ID documents with their landlords.
Takes in an ID and a salary slip, and outputs a ZK proof that the ID is valid, and the salary is enough to cover the rent.
See the detailed post on Hyli's blog
You can play with the Noir circuits on tdd.nr repo.
If you're lucky, maybe the app is still live...
privacyzero-knowledgenoir

Cryptography & open source

Noir WebProof SDK proposal

since Jul 2025

WebAssembly-friendly Noir SDK, to make in-browser zkTLS web proofs practical

zero-knowledgewebassemblynoirzk-tls

mpz-play

Jun 2025

A hands-on playground for learning the mpz MPC framework, ported to the latest version of mpz

mpceducation

stark_by_hand with Sage

Mar 2025

Building a STARK step by step in SageMath, to really understand how the protocol works

starkzero-knowledgeeducationpython

Electisec zblock2 (formerly yAcademy)

Feb 2024 – Apr 2024

Finished as a top fellow in Electisec's ZK security fellowship, auditing real ZK circuits

zero-knowledgesecurityauditingresearcheducation

halo2-starter

Jun 2024

A ready-to-go Halo2 project template, with testing wired up from day one

halo2testing

Write secure Halo2 circuits

Feb 2025

How Halo2 circuits go wrong: common soundness bugs, with circuits and tests that catch them

I wrote a detailed blog post, and multiple circuits, on how to write secure Halo2 circuits, and how to test them
halo2securityresearcheducation

Halo2 cheating feature

Jun 2024

A Mock Prover feature that emulates a malicious prover by tampering with cell values

A nice feature I wanted while developing circuits.
This was my first PR in Halo2, it was fun to dive into the codebase
halo2security

Tornado Cash with Halo2

Feb 2024

A from-scratch reimplementation of Tornado Cash in Halo2, with a detailed write-up of the circuits

Fun project to get more familiar with both Tornado Cash and Halo2.
On top of the circuits, I wrote a detailed blog post to explain everything
A part 2 is supposed to come someday... mostly to implement the Poseidon hash function (from scratch?), but I haven't had the time to finish
halo2zero-knowledgesecurityprivacy

Engineering & experience

Security

since Jan 2024

Low-level security, self-taught: from binary exploitation to kernel exploits

I'm passionate about security, especially low-level (like reverse engineering, assembly, and binary exploitation) but I also enjoy web and network hacking.
Entirely self-taught, mostly through HackTheBox and Root-Me
From "simple" binary exploitation to kernel exploits and more.
securityeducationassembly

Secureum Epoch 0

Oct 2021 – Dec 2021

Placed 1st in the first cohort of Secureum's smart-contract security bootcamp

The very first cohort of what became one of the best-known smart-contract security bootcamps.

See the bootcamp content
securityevmsolidityeducation

Angle: EURO stablecoin

Jun 2021 – Jan 2023

Core contributor to Angle, the leading decentralized euro stablecoin

Helped build and ship the protocol, which reached €200M TVL while I was there.
evmsolidity

10 years of building

since Jul 2015

A full-stack decade: from mobile apps to cloud infrastructure to cryptography

Over the past decade, I've worked across the stack.
From crafting iOS mobile apps, to building backend-heavy web applications with Node.js, to running infrastructure as a DevOps engineer on AWS and GCP.
This foundation now fuels my work in cryptography and security.