About:
I am a security researcher primarily focused on Web3 contracts with Solana/Solidity/Vyper/Rust codebases.
In 2023, I graduated with a master's degree in Computer Science, specializing in machine learning and data science. My thesis focused on finding smart contract vulnerabilities with deep learning, which redirected my career path to web3 security.
I have over two years of experience auditing codebases in Solidity, Rust, and Vyper. I've consistently ranked at the top of the HatsFinance leaderboard and have served as a lead auditor and judge multiple times. In addition, I've conducted several private audits and testing.
Full-time Solana auditor at Accretion Labs since May 2025.
Audits:
Blog Posts
| Title | Link |
|---|
| Compressed Nfts Solana | Link |
Accretion Labs
| Date | Project | Language | Report |
|---|
| 2025-August | Private yet | Rust(Solana, pinocchio) | Not reported yet |
| 2025-July | Private yet | Rust(Solana, Library) | Not reported yet |
| 2025-July | Metaplex | Rust(Solana, Native) diff-audit | Not reported yet |
| 2025-July | Metaplex | Rust(Solana, Native) diff-audit | Not reported yet |
| 2025-July | Private yet | Rust(Solana, Anchor) | Not reported yet |
| 2025-June | Private yet | Rust(Solana, Anchor) | Not reported yet |
| 2025-June | Private yet | Rust(Solana, Anchor) diff-audit | Not reported yet |
| 2025-May | Swig wallet | Rust(Solana, pinocchio) | Report |
| 2025-May | RealmsDao | Rust(Solana, Native) diff-audit | Report |
| 2025-April | Metaplex | Rust(Solana, Native) | Not reported yet |
| 2025-April | Metaplex | Rust(Solana, Native) | Not reported yet |
Pashov Audit Group
| Date | Project | Language | report |
|---|
| 2025-May | Zipper | Solidity | Report |
| 2025-May | PumpDotFun | Rust(Solana, Anchor) diff-audit | Not reported yet |
| 2025-April | bob-airdrop | Solidity diff-audit | Not reported yet |
| 2025-March | Curve | Vyper | Not reported yet |
| 2025-March | PumpDotFun | Rust(Solana, Anchor) | Not reported yet |
| 2025-February | PumpDotFun | Rust(Solana, Anchor) | Not reported yet |
| 2025-January | Burve | Solidity | Report |
| 2025-January | Onchain Heroes | Solidity | Report |
Guvenkaya Sec
| Date | Project | Language | Report |
|---|
| 2025-March | Private yet | Rust(Solana, Anchor) | Not reported yet |
| 2025-January | Private yet | Rust(Solana, Anchor) | Not reported yet |
Private Audit, Testing, and Development
Top in Competitions
| Date | Contest | Language | Result | Leaderboard | Host |
|---|
| 2024-October | Seer-pm | Solidity | 1st | Link | Hats.Finance |
| 2024-September | Circles | Solidity | 1st | Link | Hats.Finance |
| 2024-September | Proof Of Humanity V2 | Solidity | 3st | Link | Hats.Finance |
| 2024-August | Dappslap | Rust(Solana, Anchor) | 2st | Link | Hats.Finance |
| 2024-August | Inverter | Solidity | 2st | Link | Hats.Finance |
| 2024-August | PalmeraDao | Solidity | 1st | Link | Hats.Finance |
| 2024-June | Metrom | Solidity | 1st | Link | Hats.Finance |
| 2024-June | Kintsu | Rust(Ink) | 1st | Link | Hats.Finance |
| 2024-April | Alephzero Most | Rust(Ink), Solidity | 1st | Link | Hats.Finance |
| 2024-February | Alephzero Common-amm | Rust(Ink) | 2st | Link | Hats.Finance |
| 2023-November | Possum Hlp-adapter | Solidity | 1st | Link | Hats.Finance |
| 2023-September | Convergence | Solidity | 2st | Link | Hats.Finance |
Judge and Lead Auditor on HatsFinance
Teamworks
| Date | Contest | Language | Result | Leaderboard | Host | Teammate(Twitter) |
|---|
| 2024-September | Starknet Staking | Cairo | private, 6 on leaderboard | Link | Codehawks | thepantherplus |
| 2024-September | Winnables Raffles | Solidity | 3h-2m out of 3h-5m | Link | Sherlock | yashar0x |
| 2024-September | fjord | Solidity | 1h-2m out of 1h-4m | Link | Codehawks | MatinRezaii1 |
Profiles
| Host | Profile Name | Link |
|---|
| Hats.Finance | mahdirostami | Link |
| Sherlock | mahdirostami | Link |
| Codehawks | mahdirostami | Link |
| Code4rena | mahdirostami | Link |
| Cantina | 0xmahdirostami | Link |
