100+ DeFi & ERC-20 smart contract audits at HAECHI LABS, where I learned to read code by asking how it breaks.
Overview
100+ audits of mainnet DeFi & ERC-20 protocols, with real money, real users, no undo.
… and 90+ more, audited in production
The problem
Once it’s live, you can’t patch it.
One bug = stolen funds.
The approach
Exhaustive over fast, because on mainnet there is no patch. So I read every line by hand and proved each path could not break.
No skimming. Read the contract the way an attacker would, asking where it breaks.
Reentrancy, oracle manipulation, overflow: each attack vector gets its own failing test.
Every finding reproduced end-to-end before it ever reached a client report.
The result
Every finding shipped with a reproducible exploit, fixed and re-verified before mainnet.
What I built
DeFi audits: reentrancy, oracle manipulation. A security-first habit I still apply to every frontend.
Every finding, a reproducible exploit, explained clearly to non-technical stakeholders.
In-house Hardhat tooling materially cut audit setup, and was adopted team-wide.
Production Solidity to client spec: high-stakes financial software under strict deadlines.