Security-focused Smart Contract Auditor and Blockchain Developer , DeFi protocol auditing, and full-stack DApp development. Active competitor on Sherlock, Code4rena, and Codehawks, currently triaging at Pashove Audit Group. Specialises in EVM protocols, cross-chain bridges, AMMs, and Solana/SPL programs. Also an educator, having published Solidity and DeFi security courses on Udemy and YouTube.
I am available for private smart contract security audits, testing, Research and collaborative team audits. Feel free to reach out via .
- MothanaRay Universal smart contract pattern comparator for security researchers. Compares any contract (ZKs, DTLs, SDKs, DeFi, etc.) against known industry standards and protocols — surfacing security mismatches, gas inefficiencies, architecture divergences, and fork lineage with exact code snippets and explanations.
2026 – Present
- Review and validate vulnerability reports submitted by external researchers.
- Assess impact, severity, and root cause across DeFi protocols; triage and escalate critical findings.
| Project | Protocol Type | Platform | Language | Total Issues | Accuracy |
|---|---|---|---|---|---|
| UnDisclosed | DEX | Pashov Audit Group | Rust | 100 | 100% |
| UnDisclosed | DEFI | Pashov Audit Group | Solidity | 100 | 100% |
| UnDisclosed | Staking | Pashov Audit Group | Solidity | 60 | 100% |
| ID | Protocol | Ecosystem | Description | Findings | Report |
|---|---|---|---|---|---|
| 1 | 2403-PasswordStore | Solidity - EVM | PasswordStore is a protocol dedicated to storage and retrieval of a user's passwords. The protocol is designed to be used by a single user, and is not designed to be used by multiple users. Only the owner should be able to set and access this password. | 2 H, 1 I | 🔗 |
| 2 | 2403-Puppy-Raffle | Solidity - EVM | Puppy Rafle is a protocol dedicated to raffling off puppy NFTs with variying rarities. A portion of entrance fees go to the winner, and a fee is taken by another address decided by the protocol owner. | 3 H, 4 M , 1 L ,2 G, 6 I | 🔗 |
| 3 | 2405-TSwap | Solidity - EVM | TSWAP is an constant-product AMM that allows users permissionlessly trade WETH and any other ERC20 token set during deployment. Users can trade without restrictions, just paying a tiny fee in each swapping operation. Fees are earned by liquidity providers, who can deposit and withdraw liquidity at any time. | 3 H, 3 M, 2 L, 5 I | 🔗 |
| ID | Protocol | Ecosystem | Description | Findings | Report |
|---|---|---|---|---|---|
| 1 | 2602-Hopex | Solidity - EVM | Cross-chain lottery protocol built on LayerZero V2 | 4 H, 4 M, 2 L | 🔗 |
| ID | Protocol | Ecosystem | Platform | Description | Findings | Report |
|---|---|---|---|---|---|---|
| 1 | Hybra Finance | Solidity - EVM | C4 | Decentralized public liquidity layer for Hyperliquid | 1 H | 🔗 |
| 2 | Notional Exponent | Solidity - EVM | Sherlock | Notional Exponent is a leveraged yield protocol. Notional Exponent enables users to borrow from Morpho to establish leveraged staking, leveraged PT, and leveraged liquidity strategies. | 2 M | 🔗 |
| 3 | Next-generation | Solidity - EVM | C4 | — | 1 M | 🔗 |
| 4 | Aave DIVA Wrapper | Solidity - EVM | Codehawks | — | 1 L | 🔗 |
| ID | Protocol | Ecosystem | Platform | Description | Finding | Status | Report |
|---|---|---|---|---|---|---|---|
| 1 | The Flipcash Reserve Contract | Solana - SPL | Hackenproof | Bonding curve / stablecoin reserve | Permissionless SPL transfer to pool vault decouples bonding curve state, enabling complete drain of USDF from any live pool | OOS | 🔗 |
| 2 | Ethena | Solidity - EVM | Immunefi | Staking / reward distribution | Privileged State Desynchronization in redistributeLockedAmount() Enables Double Asset Claims |
DUP | 🔗 |
| 3 | Berachain | Solidity - EVM | Immunefi | BEX Vault (Balancer V2 Fork) | Internal Balance Pre-Poisoning Vulnerability Allowing Fund Theft When Adding Newly-Deployed Tokens | DUP | 🔗 |
| 4 | Flare | FAssets Vault | Solidity - EVM | Immunefi (Audit Comp) | Collateral reservation | Fee Loss on Rejected Collateral Reservation Due to Transfer Failure | OOS | 🔗 |
| 5 | BOB | Solidity - EVM | Remmedy | Cross-chain, L2 | Gateway strategy wrappers use total contract balance instead of freshly minted output, enabling residual balance capture | DUP | 🔗 |
| 6 | PHUX | Solidity - EVM | External | AMM (Balancer V2 fork) | Token frontrun vulnerability | — | 🔗 |
Founder | BrewHash
2026 – Present
- Building a complete lifecycle security service for Web3 protocols.
- Running educational Web3 security content via YouTube @brewhash.
July 2021 – Present
- Solidity smart contract development across token standards: ERC20, ERC721, ERC1155, TRC20, TRC721.
- Blockchain integrations across Ethereum, Polygon, BNB Chain, and Tron.
- API integration and Web3.js / Ethers.js for contract interactions.
- Worked with DeFi startups to design and deploy secure smart contracts.
Transaction Processor DApp (Nov 2024 – Dec 2024) Developed a multi-transaction processor on Binance Smart Chain supporting wallet creation, gas estimation, contract deployment, and CSV-based batch execution with secure interaction features source
TronX Admin Dashboard (Mar 2025 – Apr 2025) Built an advanced admin dashboard for Tron and EVM networks with multi-wallet support (TronLink, OKX, Ledger). Implemented multi-chain fund controls, spender management, token transfers, and cross-chain withdrawals source
MuslimEthGuardEVM (Rust) Custom EVM implementation in Rust, demonstrating low-level understanding of Ethereum execution internals.
Ultimate Solidity Smart Contract Course (Solidity) Comprehensive Solidity course repository for beginners, covering core concepts through to advanced patterns.
- BSc in Computer Science — Ibn Zohr University, Agadir, Morocco (2021 – 2023)
- Smart Contract Auditing & Security — Foundry Full Course & Cyfrin Updraft (2023 – 2024)
- Published Solidity, DeFi security, and smart contract fundamentals courses on Udemy & YouTube.
- Educated developers on secure coding practices and blockchain security strategies.
| Category | Details |
|---|---|
| Languages | Solidity, Rust, JavaScript, Python |
| Security Tools | Foundry, Slither, Echidna, Mythril, Scribble |
| Analysis | Fuzzing, Static Analysis, Dynamic Analysis |
| Ecosystems | EVM (Ethereum, Polygon, BNB, Tron), Solana / SPL, Cross-chain (LayerZero V2) |
| Protocols | AMMs, Bridges, Staking, Bonding Curves, Balancer V2 Forks, ERC20/721/1155, TRC20/721 |
Languages: Conversational English · Fluent Arabic
Interests: Blockchain Security Research · Open-Source Contributions · Developer Education