11 top-10 contest finishes · 150+ findings · 14 Critical / 27 High
Code4rena
HackenProofI'm EVDoc, an independent security researcher specialized in smart-contract audits. Since late 2023 I've competed on Code4rena, Cantina and HackenProof — finishing top-10 in 11 of my 14 concluded contests, including in fields of 400–700 researchers.
Before Web3, I was Chief Market Analyst at XTB France (Paris). That financial-markets background is an edge on the protocols I audit most — perpetuals, order books, lending, stablecoins — where the highest-impact bugs sit in the economic mechanics, not just the code.
Alongside contests, I deliver private audits — six to date, including a joint engagement with Guardian Audits on Parifi — and hunt on bug-bounty programs.
📫 Open to private audits, contest collaborations and security-researcher roles — DM me (EVDoc): @AboutikaR
- 22 audits — 16 competitive contests (2 ongoing) + 6 private audits — plus bug-bounty findings
- 150+ findings — 14 Critical · 27 High · 61 Medium · 53 Low/QA
- 11 top-10 finishes — Telcoin Network (9/687) · Octant v2 (10/609) · Mezo (10/475) · Silo v2 (10/416) · Monad (top 10) · +6 more
- Beyond the EVM — findings on an L1 node (Monad), LayerZero's Stellar endpoint and Hyperbridge (cross-chain)
- Technical writing — 3-part Liquity V2 deep-dive (stablecoin/CDP) · two HackenProof blog articles — multi-agent AI code-review pipeline · Web2 bugs hiding in Web3
- Tooling — 5 private AI-assisted audit pipelines built and used across the work above (see Audit Tooling below)
- Verticals — L1 Blockchain · Cross-chain Messaging · DEX · Perpetuals · Stablecoin · RWA · Vault Infra · Marketplace · Options AMM · Staking · Grants · Bonding Curves · Lending · Liquidity · Escrow · Casino · Prediction Market
Best ranked finishes (5 of 11 top-10s shown):
| Contest | Platform | Rank | Category | Date | Report |
|---|---|---|---|---|---|
| Telcoin Network | 9 / 687 | L1 | Jun 2025 | Report | |
| Octant v2 | 10 / 609 | Vault Infra | Sep 2025 | Report | |
| Mezo | 10 / 475 | Stablecoin | Apr 2025 | Report | |
| Silo v2 | 10 / 416 | Lending | Jan 2025 | Report | |
| Monad |  Code4rena |
10 | L1 | Sep 2025 | Report |
16 contests across Code4rena, Cantina and HackenProof — most recent first.
| Contest | Platform | Category | Date | Crit | High | Med | Low/QA | Report |
|---|---|---|---|---|---|---|---|---|
| 0xMarkets 🟡 |  HackenProof |
Perpetuals | Jun 2026 | — | 2 | 1 | — | pending |
| TipRun 🟡 | HackenProof |
Prediction Market | Jun 2026 | 1 | — | — | — | pending |
| LayerZero - Stellar Endpoint | Code4rena |
Cross-chain | Apr 2026 | — | — | — | 1 | Report |
| Revert Finance - StableSwap Hooks | DeFi / Hooks | Apr 2026 | — | — | 2 | — | Report | |
| Megapot | Code4rena |
Jackpot | Nov 2025 | — | — | 1 | 1 | Report |
| Monad | Code4rena |
L1 | Sep 2025 | — | 1 | — | — | Report |
| Octant v2 | Vault Infra | Sep 2025 | — | — | 1 | — | Report | |
| Kuru | AMM | Aug 2025 | — | — | 1 | — | Report | |
| GTE Spot CLOB and Router | Code4rena |
DeFi | Jul 2025 | — | — | 1 | — | Report |
| Ammalgam | Lending Exchange | Jul 2025 | — | — | 1 | — | Report | |
| Telcoin Network | L1 | Jun 2025 | — | 2 | 2 | — | Report | |
| Jigsaw | Stablecoin | May 2025 | — | 3 | 3 | 1 | Report | |
| Mezo | Stablecoin | Apr 2025 | — | — | 3 | — | Report | |
| Silo v2 | Lending | Jan 2025 | — | — | 1 | — | Report | |
| Size | Code4rena |
DeFi | Jun 2024 | — | 1 | 1 | — | Report |
| Ethereum Credit Guild | Code4rena |
DeFi | Dec 2023 | — | 1 | — | — | Report |
🟡 Ongoing — findings triaged and validated by the platform, awaiting final resolution; not yet counted in the totals above.
Full contest history on my profiles: Code4rena · Cantina · HackenProof
| Protocol | Platform | Category | Date | High | Med | Low |
|---|---|---|---|---|---|---|
| Midas | RWA | Jul 2026 | — | — | 1 | |
| Hyperbridge | HackenProof |
Cross-chain | Jun 2026 | — | — | 3 |
Conducted with Midgar Audits; Parifi was a joint engagement with Guardian Audits. Low/QA counts include informational findings.
| Protocol | Category | Date | Crit | High | Med | Low/QA | Report |
|---|---|---|---|---|---|---|---|
| 1DFX - Price Store | Perpetual Futures | Sep 2024 | — | 2 | 5 | 4 | Report |
| 1DFX | Perpetual Futures | Jul 2024 | 1 | 4 | 9 | 10 | Report |
| DeGaming - 2nd Audit | Casino | Apr 2024 | 5 | 1 | 2 | 2 | Report |
| DeGaming - Bankroll | Vault | Mar 2024 | 2 | 6 | 6 | 6 | Report |
| DeGaming | Casino | Feb 2024 | 5 | 1 | 11 | 6 | Report |
| Parifi (Midgar × Guardian) | Perpetuals | Jan 2024 | 1 | 5 | 11 | 18 | Report |
Protocol deep-dives and security tooling — on the same classes of systems I audit.
| Article | Topic | Date | Published on |
|---|---|---|---|
| Web2 Bugs Hiding in Web3: The Smart Contract Security Blind Spot | Web2 vulnerabilities × smart contracts | Jul 2026 | HackenProof Blog |
| Build a Multi-Agent AI Code Review Pipeline | AI × audit tooling | Jun 2026 | HackenProof Blog |
| Liquity V2, Part 3 — Multi-Layered Stabilization: Redemption, Interest, and Liquidation | Stablecoin / CDP | Sep 2025 | Midgar (Hashnode) |
| Liquity V2, Part 2 — Diving Deeper: Troves, Batch Troves, and the Trio of Pools | Stablecoin / CDP | Sep 2025 | Midgar (Hashnode) |
| Liquity V2, Part 1 — Meet BOLD: Multi-Collateral Stability Without Governance | Stablecoin / CDP | Sep 2025 | Midgar (Hashnode) |
I build the AI-assisted pipelines behind my contest work — five to date, kept private: they're my edge. The approach itself is public — a demo repo and a write-up on the HackenProof blog.
- Oni v2 — multi-agent smart-contract audit pipeline, native Claude Code architecture (slash command + skill + 10 specialized sub-agents), with mechanical verification of every finding
- Kitsune — multi-provider pipeline built on LangGraph: each sub-agent runs on a different model family (Anthropic · OpenAI · Google) to exploit cross-family error decorrelation
- Saito — the Oni engine ported to trust-boundary security for multi-tenant SaaS (Supabase RLS · Edge Functions) — battle-tested in production on my own app
- …plus two more in private daily use
This repo is for portfolio purposes only.