Proof

Don't take my word for it. Every claim below links to something you can verify yourself — a public contest report, a disclosed writeup, or a leaderboard entry.

Verify directly

Immunefi: Peaked #16 (2023) · 2 Critical findings Profile →
Sherlock and Code4rena: Across Code4rena and Sherlock: 1× 1st · 16× Top-10 · 47× Top-25. Profile →

Some findings are public; others are counted on the Immunefi leaderboard but stay confidential per client agreement. I disclose only what protocols authorize. Contest findings link to their public reports.

Selected Findings

Critical Denial of service MUX Immunefi 2024 Writeup ->
Critical Access Control Oasys Immunefi 2023 Writeup ->
High Accounting Neo Tokyo Code4rena 2023 Report ->
High Decimal precision Surge Sherlock 2023 Report ->
High Cross-function reentrancy Stakehouse Code4rena 2022 Report ->
High Example Example Immunefi, 2020 Writeup ->

I have built a catalog of vulnerability patterns from work like the above — bounties, contests, private engagements. A public subset is available here