Let Us Help You Connect
Our team can assist with project requirements, timeline coordination, and finding the perfect match
Portfolio & Experience
Detailed audit history and technical expertise
Al-Qa'qa' Auditing Portfolio
My audit portfolio contains the contests I participated in and my engagements in Web3 security.
For private audits, check this link.
About Al-Qa'qa'
I am an Independent Web3 security researcher, focusing on Dapps, and DeFi.
I am doing contests on different platforms like Sherlock, and Cantina.
Private Audits
| Protocol | Scope | Description | Findings | Report |
|---|---|---|---|---|
| Merit Systems | Escrow | Escrow | 2L | 📄 |
| Khuga Labs | khugabash-smartcontract | Gaming, NFTs | 2 H, 2 M, 5 L | 📄 |
| Merit Systems | Escrow | Escrow | None | 📄 |
| Merit Systems | SplitWithLockup | Escrow | 2 M, 1L | 📄 |
| Venice | Private | ERC20, Staking | 3 H, 2 M | 📄 |
| DYAD | TimeLock | TimeLock, Staking Rewards | 2 M | 📄 |
| TakaDAO | ReferralGateway | DAOs, Referral System | 3 H, 4 M, 4 L | 📄 |
| DYAD | LpStaking | Staking, Transit Storage | 2 H, 1 M, 3 L | 📄 |
| DYAD | DyadXPv2 | Staking, UniswapV3 integration | 1 H, 1 M, 2 L | 📄 |
| DYAD | VaultManagerV5 | Stablecoin, Hooks | 1 H, 1 M, 2 L | 📄 |
| DYAD | weETH Vault | Vault, weETH token | 1 M | 📄 |
| DYAD | DyadXP | Staking, Time-Weighted token | 2 H, 3 M, 3 L | 📄 |
| DYAD | VaultManagerV3 | Stablecoin | 2 H, 3 M, 2 L | 📄 |
Engagments
| Company | Protocol | Description | Findings | Report |
|---|---|---|---|---|
| Cyfrin | MetaMask | Account Abstraction, Delegations Modules | 1 H, 2 M, 5 L | 📄 |
| Undisclosure | Undisclosure | SVM, Tokenization, time-weight staking | Private | -- |
| Cyfrin | Undisclosure | SVM, Staking, RWA | Private | -- |
| Sheildify | Etherspot | Account Abstraction, ERC-7579 | 12 C/H, 2 M, 8 L | 📄 |
| Sheildify | Etherspot | Account Abstraction, ERC-7579 | 2 C/H, 2 M, 4 L | 📄 |
| Cyfrin | Undisclosure | Staking, RWA | Private | -- |
| Undisclosure | Undisclosure | SVM, staking | Private | -- |
| Undisclosure | Undisclosure | SUI/Move, CLAMM, staking | Private | -- |
| Cyfrin | Undisclosure | Escrow, Cross chain | Private | -- |
Highlights
| Contest | Description | Findings | Rank | Report |
|---|---|---|---|---|
| Soon | SVM, layer2, OP Stack | 4 H, 10 M, 3 L | 🥇 | - |
| Ark Bridge | NFT Bridge, Starknet | 5 H, 3 M, 5 L | 🥇 | 📄 |
| Intuition | Account Abstraction, Vaults | 2 L | 🥇 | 📄 |
| UniStaker | Staking, Voting | 5 L | 🥈 | 📄 |
| RadicalxChange | NFTs, Auction, Diamond Proxy | 1 H, 1 M | 🥈 | 📄 |
| PoolTogethar | Vaults, ERC4626 | 1 H, 2 M, 3 L | 🥉️ | 📄 |
| Zetachain | Layer1, Cross Chain, Omnichain | 2 H, 6 M | 🥉️ | - |
Audit Contests
| Contest | Description | Findings | Rank | Report |
|---|---|---|---|---|
| Optimism InterOP | Layer2, OP stack | 1 L | 5th | - |
| Farcaster | EAS, Social Network | 5 H, 2 M, 9 L | 6th | - |
| Soon | SVM, layer2, OP Stack | 4 H, 10 M, 3 L | 🥇 | - |
| Swan Protocol | NFTs, AI, Statistics | 2 H, 3 M, 1 L | 7th | 📄 |
| Zetachain | Layer1, Cross Chain, Omnichain | 2 H, 6 M | 🥉️ | - |
| Ark Bridge | NFT Bridge, Starknet | 5 H, 3 M, 5 L | 🥇 | 📄 |
| Intuition | Account Abstraction, Vaults | 2 L | 🥇 | 📄 |
| Optimism-Safe | MultiSig, Safe Wallet | 1 M, 1 L | 15th | 📄 |
| DYAD | Stablecoin | 3 H, 3 M, 6L | 4th | 📄 |
| RadicalxChange | NFTs, Auction, Diamond Proxy | 1 H, 1 M | 🥈 | 📄 |
| PoolTogethar | Vaults, ERC4626 | 1 H, 2 M, 3 L | 🥉️ | 📄 |
| UniStaker | Staking, Voting | 5 L | 🥈 | 📄 |
| Covelant | Staking, Nodes Block Producers | 1 M | 15th | 📄 |
| ZetaChain | L1, OmniChain, Cross-chain | 1 H, 11 L | 11th | 📄 |
| NextGen | NFTs, Airdrops | 3 H, 1 M | 43th | 📄 |
| OpenDollar | Stable Coin | 2 L | 75th | 📄 |