I am a well-profounded Security Researcher, winning and coming out top in contests hosted by top platforms by the likes of Code4rena, Sherlock Doing bug bounties currently on L1s.
Pariticipated and found valid Bugs across different protocols on different chains in public audit contests
- Proficient in Go, Move, Solidity & Rust.
For private audit or consulting requests, please reach out to me via:
- Twitter
@0xbarz - Telegram
@HarryBarz - Discord
@HarryBarz
| Contest | Description | Link |
|---|---|---|
reserve-index-dtf ~ Cantina |
The Reserve Index Protocol is a protocol for creating and managing portfolios of ERC20-compliant assets entirely onchain. | Link |
Seda Protocol ~ Sherlock |
Seda is programmable oracle infrastructure. Allowing developers to access any data from any L1 or L2. This audit is focussed on the chain and the oracle batch proof accessibility and verification across evm chains. | Link |
Crystal Netwrok ~ Sherlock |
Crestal Network is building upgradeable, gasless (ERC-4337) smart contracts for creating and managing AI agents, including on-chain payments and agent updates. | Link |
Velvet-V4 ~ Cantina |
Velvet.Capital is an Intent Operating System for DeFi which aims to streamline onchain portfolio management. | Link |
mystic-monorepo ~ Cantina |
The Mystic Finance making a environment dedicated to RWA-backed lending which takes RWA's different characteristics into account and not only supports them, but leverages them to their full potential. | Link |
Mezo-Monorepo ~ Cantina |
Mezo is a Bitcoin-focused platform that turns BTC into a dynamic financial tool by enabling borrowing, spending, and earning, with MUSD as its Bitcoin-backed stablecoin for on-chain financial activities. | Link |
Zetachain (Collaborative Work) ~ Sherlock |
ZetaChain is a layer one EVM compatible chain with a native interopability solution built in. Allowing developers to build Universal Dapps that interact with all chains. | Link |
Alchemix V3 ~ Cantina |
Alchemix lets you instantly access loans representing your collateral's future yield. Over time, the interest your deposit earns is used to repay your debt automatically. | Link |
Lend ~ Sherlock |
LEND is a cross chain lending protocol with real yield value extraction, from protocol, to holder. The audit will focus on the cross-chain functionalities within the LEND infrastructure. | Link |
XtraFi X-Lend (Collaborative Work) ~ Sherlock |
Extrafi XLend is a smart lending protocol offering multi-accounts and advanced lending/borrowing strategies. This contest focuses on user asset safety, oracle safety and smart account management. | Link |
Dodo CrossChain Dex ~ Sherlock |
This contest focuses on the security of DEX built on ZetaChain’s cross-chain infrastructure. | Link |
DeBank ~ Sherlock |
The best portfolio tracker for Ethereum and EVM. | Link |
ChainLink (Collaborative Work) ~ Code4rena |
A community engagement and rewards program designed to incentivize active participation in the Chainlink Network | Link |
Gamma Brevis Rewarder (Collaborative Work) ~ Sherlock |
Gamma is a protocol for active liquidity management. This contest focuses on using Brevis' ZK coprocessor to validate and incentivize user liquidity positions. | Link |
Telcoin Update #2 (Collaborative Work) ~ Sherlock |
Telcoin uses blockchain to deliver low-cost, high-quality decentralized financial services to mobile users worldwide. This audit reviews an upgrade to its swapping mechanism to better support stablecoins. | Link |
Nouns DAO - Auction Streams (Collaborative Work) ~ Sherlock |
Introduces “Streams Escrow” to stream most auction funds to the DAO instead of sending them upfront. | Link |
Mitigation Audit Flare FAssets ~ Immunefi |
At the core of FAssets v1.1 is a new architecture component called the Core Vault, designed to improve system liquidity, scalability, and capital efficiency. | Link |
| Contest | Description | Lang ~ EcoSystem | Report |
|---|---|---|---|
| Soon | Soon | Soon | report |
Due to the privacy constraints in Bug Bounty Prorgrams, I can't share publicly the findings, but can share more insight about some of the findings upon request. So for now, I just share the bug categories, 1 for each valid immunefi bugs.
I'm really good with RPC bugs. :>>>) Dm on any of my socials for details
| Protocol Type | Lang | Report | Bug Category |
|---|---|---|---|
| DLT | GO | Private | Shutdown of greater than or equal to 30% of network processing nodes without brute force actions, but does not shut down the network |
| DLT | GO | Private | RPC API crashes leading to consensus failures or halted block progression |
| DLT | GO | Private | Shutdown of greater than 10% or equal to but less than 30% of network processing nodes without brute force actions, but does not shut down the network |