PhD in Software Engineering
Research-engineering profile spanning formal software engineering, AI assistant security testing, EVM and DeFi security, privacy-preserving blockchain systems, distributed backends, and low-latency market-data infrastructure.
Current Research
The current research question is practical: when an AI agent acts, what information influenced the action, who authorized that influence, and what authority did the resulting action carry?
The research workspace maps the security boundary created by LLM agents with memory, tools, browsers, terminals, MCP servers, long-running workflows, and cross-agent interfaces. The work emphasizes threat model clarity before implementation: attacker capabilities, context trust, memory integrity, tool authorization, capability isolation, provenance preservation, execution auditing, and cross-agent contamination control.
Selected Systems
Work spans private production systems, public repositories, security research prototypes, and DeFi products. Private repositories are available on request when appropriate.
Security lab for AI assistant and agent pentesting across OWASP LLM Top 10 risks: prompt injection, sensitive disclosure, tool supply chain, RAG poisoning, improper output handling, excessive agency, system prompt leakage, embedding weakness, misinformation, and unbounded consumption.
Real-time EVM counter-exploit system that replays attacker behavior at the bytecode layer, derives data-flow and control-flow patches, validates outcomes on forked state, and submits automated responses.
Market-data and trading platform processing Solana transaction streams with sub-second OHLCV aggregation, TradingView-compatible one-second candles, token price streams, liquidity updates, low-latency APIs, and setup/deployment pipelines using GitHub Actions and GCP Cloud Run.
Backend work for pulsedex.trade, including real-time Solana data streams across multiple Solana DEXes, token properties and holder statistics, backend support for TradingView-compatible candles, and AWS deployment for production service operation.
Rust DEX aggregator integrating Raydium, Orca, PumpFun, Meteora, Bonk, and other protocols with REST quotes, gRPC streaming, liquidity filtering, split-path routing, and sub-second responses. Also built Ethereum-based DEX arbitrage automation for monitoring price differences, routing opportunities, and execution constraints across EVM liquidity venues.
Core matching engine and perpetual exchange design work, including order processing, margin calculations, liquidation logic, cross-margin and isolated-margin flows, settlement validation, WebSocket order placement, gRPC service calls, PostgreSQL persistence, Docker environments, and production-style integration tests. Public reference: perp-exchange-from-scratch.
Arcadia Security Audits
Security auditing is a major part of the portfolio, not a side note. The work is tied to Arcadia and covers adversarial review across DeFi protocols, bridges, layer-1 systems, and trading-adjacent blockchain logic.
Conducted security reviews for 50+ blockchain projects across Ethereum, Solana, and Aptos ecosystems, identifying and helping resolve 300+ issues with potential impact above $100M. The audit work is strongest where protocol logic, financial correctness, and adversarial execution meet: bridges, DeFi accounting, liquidation flows, access control, oracle assumptions, transaction ordering, and invariant design.
Blockchain And Security
The blockchain work combines core protocol changes, security review, privacy primitives, cross-chain settlement, validator infrastructure, and product ownership.
Proof-of-Stake privacy blockchain using secp256k1 cryptography, ring signatures, RingCT-style confidential transactions, Bulletproofs, and stealth-address mechanisms. GitHub
Proof-of-Stake consensus work, modified Geth architecture, two-second block times, public RPC and masternode infrastructure, plus privacy-preserving TomoP protocol work using zk-SNARKs.
Co-founded the largest DeFi protocol on Viction Chain, with $20M+ TVL peak, 10,000+ users, liquid staking mechanics, backend infrastructure, smart contracts, monitoring, and team leadership. vicpool.fi
Multi-chain bridge architecture across 8+ EVM-compatible networks, Rust-based MPC validator components, decentralized custody, indexing, validation, settlement monitoring, and alerting.
Security reviews across Ethereum, Solana, and Aptos projects, covering DeFi protocols, bridges, liquidation logic, oracle handling, access control, arithmetic safety, and protocol invariants. Audit index
PhD Research
Doctoral research at University of Paris-Saclay and CEA Nano-Innov France focused on model-based software engineering, model-code synchronization, distributed embedded systems, architecture specifications, and C++ performance frameworks.
PhD thesis on methodologies for model-code synchronization in reactive system development, connecting software architecture models with implementation-level engineering work.
C++ frameworks and high-throughput data processing pipelines for distributed embedded systems, with focus on real-time performance, multithreading, and low-latency communication.
Eight peer-reviewed publications on distributed systems, model-driven engineering, incremental roundtrip engineering, software architecture, and collaboration between architects and programmers.
Technical Stack
The stack reflects what has been used across production blockchain systems, trading infrastructure, security tooling, cloud deployments, and AI-security research labs.