S3v3ru5
Experience
Independent Security Researcher
July 2024 - Present
- Security Researcher at SpearBit, conducting security reviews of blockchain protocols
- Perform independent audits of smart contracts across multiple blockchain platforms
- Participate in security contests on Sherlock and CodeHawks platforms
- Portfolio of audits and contest results: s3v3ru5.github.io/audits
Trail of Bits
Blockchain Security Engineer
June 2022 - June 2024
- Conducted security reviews of smart contracts on Ethereum, Algorand, and Solana
- Reviewed off-chain components including compilers, virtual machines, and blockchain nodes written in Rust
- Contributed to Tealer, a static analyzer for Algorand smart contracts (June 2022 - Nov 2023)
- Contributed to solana-lints, a Rust linting framework for Solana programs (Dec 2023 - June 2024)
- Contributed vulnerability documentation to building-secure-contracts
Ottersec
Auditor
March 2022 - April 2022
- Performed security audits of Solana protocols
Trail of Bits
Security Research Intern
December 2021 - January 2022
- Contributed to development of Tealer, a static analyzer for Algorand smart contracts
Team Invaders & Team zer0pts
CTF Player - Cryptography
January 2019 - October 2021
- Solved cryptography challenges in Capture The Flag competitions with team Invaders (Jan 2019 - Nov 2020) and team zer0pts (Dec 2020 - Oct 2021)
- Studied and applied cryptanalytic techniques including attacks on RSA, elliptic curve cryptography, block ciphers, and hash functions
- Published detailed writeups of cryptography challenges
Education
RGUKT Nuzvid
2018 - 2022
Bachelor of Technology in Computer Science & Engineering; CGPA: 9.32/10
Projects
Tealer - Static analyzer for Algorand smart contracts
2022 - 2023
- Built control-flow graph construction and dataflow analysis infrastructure
- Implemented detectors for identifying security vulnerabilities and code quality issues
- Added support for analyzing Algorand group transactions involving multiple smart contracts
- Developed printers for code visualization and analysis result reporting
- Created comprehensive documentation and GitHub wiki for the tool
Solana-lints - Security lints for Solana programs
2023 - 2024
- Contributed custom Rust lints using the rustc compiler API for detecting vulnerabilities in Solana programs
- Implemented sysvar_get lint to detect improper system variable access patterns
- Updated existing lints to support modern Solana program structure and Anchor framework
- Reduced false positive rates through improved pattern matching and context analysis
Building Secure Contracts - Vulnerability documentation
2022 - 2024
- Documented common vulnerability patterns in Algorand smart contracts in the not-so-smart-contracts repository
- Added improper instruction introspection vulnerability pattern for Solana
- Provided code examples and mitigation strategies for each vulnerability class
Skills
Languages: Python, Rust, Solidity, TEAL, PyTeal, SageMath
Cryptography: RSA, Elliptic Curve Cryptography, Block Ciphers, Hash Functions, Cryptanalysis
Security Tools: Slither, Echidna, Tealer, solana-lints, Clippy
Analysis Tools: z3 SMT Solver, Ghidra, GDB (pwndbg), Wireshark
Blockchain Platforms: Ethereum (Solidity), Algorand (TEAL/PyTeal), Solana (Anchor/Rust)
Achievements
- Security contest placements: 2nd place in WooFi Swap Solana, 3rd place in Orderly Solana Vault and Winnable Raffles contests, 4th place in Zaros contest
- Winner of InCTF Nationals, December 2019 (Individual category)
- Winner of PBCTF 2020, December 2020 (as part of team zer0pts)
- Ranked #368 globally and #14 in India on CryptoHack platform