Cross-protocol & multi-runtime reviews
Reviewing systems across languages, protocol types, execution environments, and integrations while keeping the whole-system security model intact.
Cross-protocol / lifecycle security
source-level
source-level
security research.
Solidity / EVMSolana / RustMoveCairoDAML / CantonJavaScript / TypeScript
JesJupyter
I'm an independent blockchain security researcher and auditor specializing in Solana, EVM, and cross-protocol systems. I co-founded Taichi Audit and am a core member of DeFiHackLabs.
I add the most value in systems that span multiple languages, protocol types, execution environments, and lifecycle stages—maintaining one continuous security view as the system changes.
Where I add value
One continuous security viewFull-lifecycle security coverage
Following a protocol from architecture and integration through deployment, live operation, settlement, upgrades, and recovery.
Upgrade, remediation & independent review
Preserving context through code changes with diff reviews, fix verification, and independent reviewer support for protocol and audit teams.
Selected findings
More findings ↗
01
Share manipulation via liquidity inflationUniswap V3 position liquidity can distort share issuance and capture value from later depositors.
Velvet
Solo 02 Reward-rate manipulation near campaign expiryA short extension can unexpectedly alter emission rates and redistribute participant rewards. Royco
Solo 03 Lender loss on immediate loan repaymentA missing minimum repayment period breaks the lender's intended economics. Arcade.xyz
Solo 04 Implementation signatures that never expireAn EIP-7702 proxy update remains executable indefinitely without signed expiry controls. Coinbase
Contest
Solo 02 Reward-rate manipulation near campaign expiryA short extension can unexpectedly alter emission rates and redistribute participant rewards. Royco
Solo 03 Lender loss on immediate loan repaymentA missing minimum repayment period breaks the lender's intended economics. Arcade.xyz
Solo 04 Implementation signatures that never expireAn EIP-7702 proxy update remains executable indefinitely without signed expiry controls. Coinbase
Contest
Practice
How I workTaichi AuditIndependent security research and reviewsCo-founder
Focused review work across EVM and Solana protocols, with public research on Anchor, Token-2022, account initialization, and protocol mechanics.
Security teamsRecurring private and guest engagementsCollaborator
Recurring collaborations include Cyfrin, Pashov Audit Group, Fuzzland, Plainshift, Burra Sec, Failsafe, and yAudit. Open the complete engagement portfolio ↗
DeFiHackLabsOpen security education and incident researchCore member
Contributing to a community that turns exploits and protocol failures into reproducible, source-level security knowledge.
Recent research
All research ↗
SPL vs Token-2022: From Mint to AccountSource-level comparison of layouts, extensions, program IDs, and real initialization flows.Solana
Article ↗ Why Anchor Accounts Go Stale After CPICached account state, CPI boundaries, and when
Article ↗ Pre-Funding DoS in SolanaHow predictable pre-funded accounts can permanently block initialization.Solana
Article ↗
Article ↗ Why Anchor Accounts Go Stale After CPICached account state, CPI boundaries, and when
reload() is required.SolanaArticle ↗ Pre-Funding DoS in SolanaHow predictable pre-funded accounts can permanently block initialization.Solana
Article ↗
Open source
Selected contributionfoundry-rs/foundry · EIP-7702
Foundry support during the Ethereum Pectra upgrade
Identified and fixed an EIP-7702-related issue while the network upgrade was being activated.
Need a security review?
Whether you're building a protocol or coordinating an audit team, send the scope, stack, repository or documentation, and target timeline by email ↗ or Telegram ↗.