🍕 Hello, Web3 Citizen🍕

🔒Smart Contract Security Researcher
⚡+5 years in software development, 1 year in web3 security
🫀HAPPY CODING MY FRIEND!

• Aave V3 Flashloan callback executeOperation lacks sender validation check it
• PancakeSwap V3 Flashloan callback pancakeV3SwapCallback Lacks Sender Validation check it
• Public State-Modifying Functions Lacking Pause Protection check it
• Unprotected Chainlink VRF Request Leading to Subscription's Funds Griefing and Randomness Manipulation check it
• EOA-Restricted modifiers that checks the bytecode size of the caller address can be bypassed if called from constructor check it
• Non-Compliant ERC165 Self-Identification check it

I enjoy analyzing recently verified contracts from on-chain scanners and attempting to identify vulnerabilities. I exclusively perform these security analyses in local environments to develop educational case studies.

DISCLAIMER: To protect protocol integrity, all contract names, addresses, and identifying details have been anonymized. This repository is strictly for educational purposes and is not intended to cause harm, but rather to foster learning and improve Web3 security standards.

👉 Explore the Lab Repository