Skip to content
View pwvux's full-sized avatar
🐐
🐐

Block or report pwvux

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
pwvux/README.md

pwvux

Smart Contract Security Researcher | EVM & Solana
Breaking assumptions before they become vulnerabilities.

Independent security researcher focused on identifying vulnerabilities in smart contracts, DeFi protocols, and decentralized systems across EVM and Solana ecosystems.

My research focuses on protocol logic, access control, financial accounting, state transitions, and edge cases that can lead to exploitable vulnerabilities. I approach codebases adversarially, challenge security assumptions, and develop practical proofs of concept to demonstrate real-world impact.

Currently building my track record through competitive security audits, vulnerability research, and continuous exploration of blockchain protocol internals.


Security Track Record

  • $1,190+ in Code4rena earnings
  • #1,124 Code4rena all-time ranking
  • #144 Code4rena yearly ranking
  • 2 valid Medium findings accepted by sponsors
  • 10th place in Jupiter Lend audit contest
  • 28 Signal — Good
  • 1 competitive audit completed

Competitive Audit Experience

Jupiter Lend — Code4rena

  • Date: March 13, 2026
  • Placement: 10th
  • Findings: 2 Medium
  • Earnings: $1,190+

Identified two valid medium-severity vulnerabilities in the Jupiter Lend codebase, demonstrating practical exploitability and contributing to protocol security.

Research Focus

  • EVM Security: Solidity, smart contract architecture, execution flow, storage, and EVM-specific vulnerabilities.
  • Solana Security: Rust-based programs, account validation, ownership, signer verification, PDA security, and cross-program interactions.
  • DeFi Security: Lending markets, token protocols, financial accounting, asset flows, and economic attack vectors.
  • Vulnerability Research: Access control, business logic flaws, state inconsistencies, arithmetic issues, and broken invariants.
  • Audit Methodology: Attack-surface mapping, threat modeling, invariant analysis, adversarial testing, and proof-of-concept development.

Research Approach

  • Think like an attacker. Examine every function, state transition, and external interaction for exploitable behavior.
  • Challenge assumptions. Identify implicit trust, missing validations, and inconsistencies between intended and actual behavior.
  • Follow the assets. Trace token flows, balances, accounting mechanisms, and financial invariants.
  • Understand the architecture. Explore protocol internals, dependencies, integrations, and trust boundaries.
  • Prove the impact. Develop reproducible exploits and demonstrate concrete security consequences.

Currently

Expanding my security research across EVM and Solana ecosystems, sharpening my auditing methodology, and participating in competitive security audits.

Open to collaborating with security researchers and exploring smart contract security opportunities.

Contact: X / Twitter

Pinned Loading

  1. ethereumbook/ethereumbook ethereumbook/ethereumbook Public

    Mastering Ethereum: 2nd Edition, by Andreas M. Antonopoulos, Gavin Wood, Carlo Parisi, Alessandro Mazza, Niccolò Pozzolini

    21.5k 5.2k