protocol-security

Public security layer for Solana DeFi. Reads multisig setups, timelocks, upgrade authorities and signer activity straight from chain across 50+ protocols, flagging the governance risks audits don't catch after deployment. Built after the Drift exploit. Open source, free, no token.

A research-grade tool that analyzes Solidity smart contracts for economic vulnerabilities such as unbounded minting, toxic fee mechanisms, liquidity traps, oracle manipulation, centralized control, and broken financial invariants. Focused on economic correctness, incentive risks, and DeFi system stability.

QuarkDash - pure typescript hybrid cryptographic protocol that provides post-quantum security, high performance, and attack resistance.

Solidity smart contracts security | Beginner to Expert

Advanced security | Exploitation of protocol vulnerabilities | Advanced smart contract seurity

QuarkDash Crypto - hybrid cryptographic protocol implementation for Go that provides post-quantum security, high performance, and attack resistance.

Intentionally vulnerable gRPC security lab for learning protocol abuse, misconfigurations, authentication flaws, and real-world gRPC pentesting techniques.

Automated Ethereum protocol compliance verification. Extracts obligations from EIPs, maps to execution-specs and client code (Geth, etc.), and generates gap reports. Built with Claude Agent SDK and GitHub Actions integration.

Cross-domain Web3 incident resolution architecture with evidence, bounded authority, reconciliation, and provable closure.

Isabelle/OFMC - Linking OFMC and Isabelle/HOL

XWT (XML Web Token) is a personal experiment concept by modifying the JWT (JSON Web Token) algorithm into XML for the development of SOAP (Simple Object Access Protocol) security.

Security research focused on protocol logic, edge cases, and reproducible PoCs.

SFTWR Labs / 0xSFTWR public security research portfolio

Security analysis of MCP ecosystem – threats, defenses, benchmarks, and agent interoperability.

Web3 security research log covering bug bounty, audits, vulnerability patterns, and rule-level analysis with AI-assisted reasoning.

Python implementation of an authenticated key exchange protocol with replay, unknown key-share, and masquerade attack analysis.

Protocol modelling and verification using AVISPA and Scyther. Done during 1st year of Master's in Information Security @ Faculty of Computer Science within University of Alexandru Ioan Cuza Iasi

A six-phase secure channel project demonstrating X25519 key exchange, MITM attacks, Ed25519 authentication, ChaCha20-Poly1305 AEAD, and Solana-based decentralized key verification.

Web3 security research methodology: triage gates, invariant checks, report structure, and audit workflow notes