RESEARCH & WRITING
Technical writeups, smart contract analysis, and security research
Utilizing the Feedback Loop Properly to Find More Bugs
The security community's version of the feedback loop is missing the reward that makes habits actually stick. A framework for deliberately training bug-pattern recognition using cue, craving, response, and reward.
The Whitehat System Is Broken. Here Is What Needs to Change.
When a Renegade Finance attacker returned funds after negotiating a 'bounty,' part of the security community sympathized. Why that wasn't a whitehat story — and what bug bounty infrastructure actually needs to fix.
How AI Detects Risky Onchain Behavior: Wallet Patterns, Transaction Flags, and What the Data Reveals
How AI detects risky onchain behavior: fund fragmentation, mixer usage, cross-chain hops, and the detection techniques behind modern onchain compliance.
Smart Contract Risk Analysis: How to Identify Vulnerabilities Before They Cost Millions
A practical guide to smart contract risk analysis for DeFi traders, analysts, and compliance professionals — no Solidity experience required.
Find More Bugs by Learning to Break a Protocol's Assumptions
Invariants sit on top of assumptions, and that's where most exploits live. A framework for finding the beliefs a protocol depends on and testing whether they actually hold.