protocol-security

A research-grade tool that analyzes Solidity smart contracts for economic vulnerabilities such as unbounded minting, toxic fee mechanisms, liquidity traps, oracle manipulation, centralized control, and broken financial invariants. Focused on economic correctness, incentive risks, and DeFi system stability.

QuarkDash - pure typescript hybrid cryptographic protocol that provides post-quantum security, high performance, and attack resistance.

Solidity smart contracts security | Beginner to Expert

Advanced security | Exploitation of protocol vulnerabilities | Advanced smart contract seurity

Cross-domain Web3 incident resolution architecture with evidence, bounded authority, reconciliation, and provable closure.

Automated Ethereum protocol compliance verification. Extracts obligations from EIPs, maps to execution-specs and client code (Geth, etc.), and generates gap reports. Built with Claude Agent SDK and GitHub Actions integration.

XWT (XML Web Token) is a personal experiment concept by modifying the JWT (JSON Web Token) algorithm into XML for the development of SOAP (Simple Object Access Protocol) security.

Security research focused on protocol logic, edge cases, and reproducible PoCs.

Isabelle/OFMC - Linking OFMC and Isabelle/HOL

QuarkDash Crypto - hybrid cryptographic protocol implementation for Go that provides post-quantum security, high performance, and attack resistance.

Intentionally vulnerable gRPC security lab for learning protocol abuse, misconfigurations, authentication flaws, and real-world gRPC pentesting techniques.

Security analysis of MCP ecosystem – threats, defenses, benchmarks, and agent interoperability.

SFTWR Labs / 0xSFTWR public security research portfolio

Web3 security research log covering bug bounty, audits, vulnerability patterns, and rule-level analysis with AI-assisted reasoning.

Protocol modelling and verification using AVISPA and Scyther. Done during 1st year of Master's in Information Security @ Faculty of Computer Science within University of Alexandru Ioan Cuza Iasi

Web3 security research methodology: triage gates, invariant checks, report structure, and audit workflow notes

Python implementation of an authenticated key exchange protocol with replay, unknown key-share, and masquerade attack analysis.

A six-phase secure channel project demonstrating X25519 key exchange, MITM attacks, Ed25519 authentication, ChaCha20-Poly1305 AEAD, and Solana-based decentralized key verification.

CosmWasm ante-handler gas boundary research harness for protocol security edge cases