What we do is secret
-- Darby Crash
I spend my days thinking about security gaps in high dimensional spaces. Applies well to both adversarial AI and lattice-based cryptography....
In a previous life I was co-founder and Managing Director of Arxum Path Security GmbH. I hold OSCP and OSWE certs from Offensive Security, and my experience ranges from embedded C development of hardening OpenCAN automotive networks with CANCrypt to gradient-based attack techniques against Neural Network classifier models. I am a subject matter expert in crypto wallet security, and have spoken at Secureum's TrustX in Istanbul on the matter.
Current research focuses on attacking probability spaces in Transformer architectures, Fully Homomorphic Encryption optimizations using the CKKS scheme for private ML inference, and a multi-party Zero-Knowledge Proof protocol scheme using altered lattice-based public key derivation schemes.
Most of my professional work is private, but here are some published audits I've been a part of.
| Client | Project Name | Date | Report | Type | Language |
|---|---|---|---|---|---|
| 5North | 5N Loop Wallet | May 2026 | ๐ | Wallet | Go Typescript |
| Velar Labs | Clarity Smart Contracts | May 2024 | ๐ | Smart Contracts | Clarity |
| POKT Network | Sparse Merkle Trie (SMT) | June 2024 | ๐ | Sparse Merkle Trie Cryptographic Implementation | Go |
| MetaMask | Snaps Extension Integration | September 2023 | ๐ | Browser Extension | TypeScript |
| MetaMask | Snaps | September 2023 | ๐ | Browser Extension | TypeScript |
| MetaMask | Extension โ Seed Phrase Implementation | July 2022 | ๐ | Browser Extension | TypeScript |
| Leather formerly Hiro | Stacks Wallet Extension | April 2021 | ๐ | Browser Extension | TypeScript |
| Tezos Foundation | Kukai Wallet | March 2022 | ๐ | Wallet | TypeScript |
| Loopring | Loopring 3.6 Design + Implementation: Circuit | March 2021 | ๐ | ZK Cryptography | C++ |
ShmooCon 2018 Better Git Hacking: extracting โDeletedโ Secrets from Git Repositories with Grawler
Secureum TrustX 2023 My Tools Donโt Work Here: Penetration Testing Browser Based Crypto Wallets
My Tools Don't Work Here: Penetration Testing Browser Based Crypto Wallets
CBC Mode is Malleable. Donโt trust it for Authentication โ Arxum Path Security
Decrypting IndexedDB with Javascript โ Arxum Path Security