Portfolio & Experience
Detailed audit history and technical expertise
ABA Audit Portfolio
Proficient security researcher with over 10 years of web2 and web3 security expertise combined.
Audited smart contracts securing over $1B TVL, with 800+ findings across 41 private and collaborative engagements*.
Worked with top-tier security teams Guardian Audits (EVM) and Clarity Alliance (Stacks, Bitcoin L2).
Ranked 🥇 1st in two audit contests and placed in the top 10 in seven more**.
Socials:
- Telegram: abarbatei
- Twitter (X): abarbatei
- WarpCast: abarbatei.eth
- Blog: abarbatei.xyz (educational content)
Testimonials
Security Engagements
Security Engagements done in 2025 (15)
| Date | Project | Audited Functionality | Organization | Language | Report |
|---|---|---|---|---|---|
Jun | Liquify Ventures | Referral manager component upgrade | Independent | Solidity | 📄 |
May | Liquify Ventures | Borrowing and lending protocol | Independent | Solidity | 📄 |
May | Huego | On-chain turn-based strategic block placing game | ChainThreat | Solidity | 📄 |
May | Granite | Timelock, flash-loan and daily caps integration | Clarity Alliance | Clarity | 📄 |
May | StackingDAO | sBTC reward transfer logic changes | Clarity Alliance | Clarity | 📄 |
May | Liquify Ventures | Deposit and claim component | Independent | Solidity | 📄 |
Apr | ALEX Lab | Discrete Automated Market Maker (DAMM) swap | Clarity Alliance | Clarity | 📄 |
Apr | Bitflow StableSwap | Unbalanced liquidity withdrawals extension | Clarity Alliance | Clarity | 📄 |
Mar | iLayer | LayerZero integration for an intent-based orderbook | Independent | Solidity | 📄 |
Mar | Hermetica | USDh minting contract | Clarity Alliance | Clarity | 📄 |
Mar | Bitflow Flex Pools | Stableswap algorithm extension | Clarity Alliance | Clarity | 📄 |
Feb | Accountable | ERC7540 vault implementation | Independent | Solidity | - |
Jan | Axelar | Cross-chain bridge | Clarity Alliance | Clarity | 📄 |
Jan | iLayer | Cross-chain, intent-based orderbook | Independent | Solidity | - |
Jan | Inferno.fun | Bonding curve token launchpad | Independent | Solidity | 📄 |
Security Engagements done in 2024 (22)
| Date | Project | Audited Functionality | Organization | Language | Report |
|---|---|---|---|---|---|
Dec | Granite | On-chain price oracle integration | Clarity Alliance | Clarity | 📄 |
Dec | sBTC Reward Program | Staking contract | Clarity Alliance | Clarity | 📄 |
Dec | sBTC | Bitcoin bridging mechanism | Clarity Alliance | Clarity | 📄 |
Dec | Pyth Oracle | On-chain price oracle implementation | Clarity Alliance | Clarity | 📄 |
Nov | Zest Protocol E-Mode | Extension on a borrowing and lending protocol | Clarity Alliance | Clarity | 📄 |
Oct | Undisclosed | Bitcoin backed stablecoin | Undisclosed | Clarity | - |
Sep | Bitflow StableSwap Staking | StableSwap LP staking mechanism | Clarity Alliance | Clarity | 📄 |
Sep | Bitflow StableSwap | Extension to the existing StableSwap implementation | Clarity Alliance | Clarity | 📄 |
Sep | Zest Protocol BTCz | Bitcoin to Stacks BTC bridge | Clarity Alliance | Clarity | 📄 |
Aug | Granite Safety Module | AAVE-like Umbrella Safety Module | Independent | Clarity | 📄 |
Aug | Stacks Nakamoto Upgrade | Node infrastructure software | Clarity Alliance | Rust | 📄 |
Jul | BlastTheBalloon | Extension on my previous BTB audit | sub7 | Solidity | 📄 |
Jun | Granite | Borrowing and lending protocol | Independent | Clarity | 📄 |
Jun | Pontis Bridge | Bitcoin asset bridge | Clarity Alliance | Clarity | 📄 |
May | BlastTheBalloon | Blast on-chain lottery game | sub7 | Solidity | - |
May | b0rder1ess | Extension on my previous NAP audit | Independent | Solidity | 📄 |
May | DN404 | ERC7631 standard co-joined ERC20 and ERC721 implementation | Guardian | Solidity | 📄 |
Apr | Undisclosed | GMX V2 backed stablecoin | Guardian | Solidity | - |
Mar | Undisclosed | Staking and token migration | Guardian | Solidity | - |
Mar | Undisclosed | GMX V1 backed stablecoin | Guardian | Solidity | - |
Feb | b0rder1ess | NFTs backed by Uniswap V2 liquidity | Independent | Solidity | 📄 |
Jan | Rest Finance | Liquid Restaking EigenLayer Integration | Guardian | Solidity | 📄 |
Security Engagements done in 2023 (4)
| Date | Project | Audited Functionality | Organization | Language | Report |
|---|---|---|---|---|---|
Dec | Ithil | Borrowing, lending and options logic; GMX V1, AAVE, Fraxlend and Angle integration | Independent | Solidity | 📄 |
Dec | Umami | GMX V2 market index: GMI | Guardian | Solidity | 📄 |
Nov | Dolomite | GMX V2 integration; borrowing and lending GM | Guardian | Solidity | 📄 |
Oct | PariFi | Perpetuals logic | Guardian | Solidity | 📄 |
Public Audit Competitions done in 2023
| Date | Contest | Platform | Rank | Official Report | My findings |
|---|---|---|---|---|---|
Oct | Brahma | Code4rena | 🥇 1st out of 51 | Link | 1M |
Jul | Beedle - Oracle free perpetual lending | CodeHawks | 7th out of 276 | Link | 5H 2M |
May | Maia DAO Ecosystem | Code4rena | 6th out of 101 | Link | 2H 4M |
May | Juicebox Buyback Delegate | Code4rena | 🥇 1st out of 72 | Link | 1M |
Apr | EigenLayer | Code4rena | 18th out of 43 | Link | 1M |
Apr | ENS | Code4rena | 21th out of 59 | Link | Lows |
Mar | Neo Tokyo | Code4rena | 5th out of 123 | Link | 2H |
Feb | OlympusDAO: Single Sided Liquidity Vaults | Sherlock | 11th out of 154 | Link | 3H 1M |
Feb | Fair Funding by Alchemix & Unstoppable | Sherlock | 5th out of 107 | Link | 3M |
Jan | OpenSea Seaport 1.2 | Code4rena | 6th out of 23 | Link | Lows |
Other Public Audit Contests
| Date | Contest | Platform | Rank | Official Solution |
|---|---|---|---|---|
Jun 2025 | Race 42 | Secureum | 11th out of 49 | Link |
May 2025 | Race 41 | Secureum | 9th out of 50 | Link |
Feb 2025 | Race 38 | Secureum | 23th out of 47 | Link |
Jan 2025 | Race 37 | Secureum | 4th out of 51 | Link |
Nov 2024 | Race 35 | Secureum | 24th out of 91 | Link |
Sep 2024 | Race 33 | Secureum | 16th out of 72 | Link |
Aug 2024 | Race 32 | Secureum | 25th out of 69 | Link |
Jul 2024 | Race 31 | Secureum | 8th out of 83 | Link |
Feb 2024 | Race 27 | Secureum | 25th out of 140 | Link |
Oct 2023 | Race 22 | Secureum | 13th out of 175 | Link |
Mar 2023 | Race 16 | Secureum | 16th out of 205 | Link |
Educational content
- Labubu: Toy Story Gone Wrong
- Stack Too Deep And Indexed Event Logs
- Weird ERC721 Tokens
- DN404 - Vulnerabilities Reported And Resolved
- Blockchain reorgs for Managers and Auditors