Skip to content
View sleepycat12341013's full-sized avatar
11 followers · 9 following

Block or report sleepycat12341013

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sleepycat12341013/README.md

cmalu ractu

Smart contract security researcher — risk management, applied on-chain.

Former corporate insurance professional (~3 yrs) → smart contract security. Both are the same craft: protecting organizations by managing risk. I focus on the bugs tools and AI miss — the logic and economics of how a protocol actually behaves, not just what the code says.

Focus

  • Solidity / EVM smart contract security
  • DeFi — with a lens on insurance, coverage, and risk-pool protocols
  • Economic & logic vulnerabilities (the context bugs static analysis can't reach)

Building in public

  • web3-audit-portfolio — audit writeups & runnable Foundry PoCs (study & practice reports on public/educational code, clearly labeled as such)
  • Notes on smart contract security and the auditor's craft

Toolbelt

Solidity Foundry Slither Aderyn VS Code Git

Currently

  • Working through competitive audits (CodeHawks) and publishing writeups
  • Building detection tooling
  • Deepening the insurance × security niche — economic soundness, not just code safety

Writing

Contact

Open to audit collaborations and security work — best reached by X DM or sleepycat12341013@gmail.com.

Pinned Loading

  1. puppy-raffle-audit puppy-raffle-audit Public

    Smart contract security audit of PuppyRaffle.sol — CodeHawks First Flight. Six findings, one judged Valid/High.

    Solidity

  2. site-security-check site-security-check Public

    Check any public site's TLS, security headers, cookies and mixed content from one URL. Read-only, stores nothing.

    JavaScript

  3. QRcode_Gen_Website QRcode_Gen_Website Public

    Three privacy-first web tools running at cmalu.com — QR codes, image compression, PDF merge. All processing happens in the browser; no file is ever uploaded.

    HTML