Practice

Cybersecurity and red teaming

I research vulnerabilities and test how systems withstand adversarial scenarios: websites, applications and APIs, crypto protocols and smart contracts, and agentic AI systems.

Scope

Applied capabilities

  • Vulnerability research and red teaming within authorized scopes
  • Websites, applications, APIs, access control, business logic, and integrations
  • Solidity and Vyper contracts with executable exploit proofs
  • Circuits, verifiers, proof systems, and formal verification
  • AI red teaming: indirect prompt injection, tool misuse, and adversarial evaluation
  • Reports that separate public evidence from private program details

In practice

Projects and contributions

  • Indirect prompt injection: Gray Swan case study
  • Public reproducible review repositories and CI
  • Gray Swan Arena profile for indirect prompt injection research
  • HackerOne association with the Treasury Board of Canada Secretariat
  • Cantina associations with Reserve Protocol and Revert Finance
  • Code4rena associations with Chainlink Payment Abstraction V2 and K2

Public profiles

Profiles and contributions