I break smart contracts
before attackers do.
I audit protocols across Solidity, Move and Rust, and I love diving into new ecosystems and technologies. So far I've placed top 10 in over 10 public audit contests and earned several bug bounties, mostly in Move bug bounty programs. Together that's over $160k in rewards.
Public Contests
Every top-10 finish I've earned in public audit competitions.
| Competition | Language | Result | Leaderboard |
|---|---|---|---|
| Cabal Liquid Staking Token | Move | 1st | Code4rena ↗ |
| Somnia | C++ | 2nd | Hackenproof ↗ |
| Symmio, Staking and Vesting | Solidity | 4th | Sherlock ↗ |
| HydraDX | Rust | 4th | Code4rena ↗ |
| DittoETH | Solidity | 4th | Codehawks ↗ |
| Aquarius | Rust | 5th | Cantina ↗ |
| BitVault | Solidity | 5th | Code4rena ↗ |
| Monad | Rust/C++ | 6th | Code4rena ↗ |
| Acala | Rust | 6th | Code4rena ↗ |
| Steadefi | Solidity | 6th | Codehawks ↗ |
| Fuel Network Attackathon | Rust/Sway | 8th | Immunefi ↗ |
Bug Bounties
My top bounties. The findings were disclosed privately and aren't public.
Projects & Tooling
Tools I build for my own security work.
About
I'm a full-time Web3 security researcher. My main areas of experience are Solidity, Move and Rust, and I love exploring new ecosystems and technologies. I have successfully placed in the top 10 in over 10 contests, and I have also earned several bug bounties, mostly in Move bug bounty programs.
I'm also exploring how to best integrate AI into my workflow. Right now I run a hybrid setup, testing which tasks AI can handle well and which it can't, and I'm building my own custom skills that I can run on every audit. This hybrid workflow has already helped me catch bugs that I might have missed on my own.
You can follow me on X (@Schnilch) to see my latest achievements.
Need an audit?
I'm available for audits and collaborations. The fastest way to reach me is Telegram, so send me a message about your protocol, scope and timeline.