I write contracts and the off-chain plumbing that keeps them honest. Five years across DeFi lending, NFT infrastructure, and cross-chain messaging — Solidity when the chain is the source of truth, Rust and Go when it isn't.
The code I ship runs under adversarial conditions, so I optimise for the qualities that matter there: events on every state change, return values checked, threat model written before the first line of logic.
Lately reading more on MEV-aware design, the gap between Chainlink and Pyth oracle assumptions, and what intent-based execution actually changes about contract architecture.
┌─ now ────────────────────────────────────────────────┐
│ 🛠 shipping defi · cross-chain · audits │
│ 📬 available yes — solidity audits + contracts │
│ 🌊 signature pool runs deep │
│ ⚡ response ~24h │
│ 🔗 reach github.com/ozpool │
└──────────────────────────────────────────────────────┘
depth = available liquidity of experience.
solidity ████████████ 5y
foundry ███████████ ~5y
typescript █████████ 4y
rust ████████ 3y
layerzero ██████ 3y
go ████ 2y
own public repos — top by stars, auto-refreshed by scripts/update.sh.
prism — Liquidity Management Protocol on Uniswap V4
PRISM wraps a Uniswap V4 pool in a vault that refracts LP capital across a configurable spectrum of tick-range positions. Where V3-era LM (Gamma, Arrakis) smoothed day-to-day LP work but remained bottlenecked by centralized advisors, PRISM uses V4's hook primitive and EIP-1153 flash accounting to push the entire management loop on-chain:
Perplex — Perplex — dYdX-class decentralised perpetuals exchange. Off-chain Rust matching engine + on-chain Solidity settlement on Arbitrum. Pyth oracles, 8h funding, liquidation + ADL backstop, EIP-712 signed batch settlement.
A dYdX-class decentralised perpetual-futures exchange. Orderbook-matched. USDC-collateralised. Self-custodial. Built for Arbitrum.
topics: arbitrum axum defi dex ethereum foundry perpetuals pyth rust solidity
Devbounty-backend- — _no description_
no description
devbounty-backend — Decentralized bug-bounty platform — smart-contract escrow on Arbitrum Sepolia (USDC) released by GitHub merge webhooks. Express API + indexer + Hardhat contracts (npm workspaces).
This repo is an npm-workspaces monorepo holding the Express API, the chain indexer, and the Hardhat smart contracts. The Next.js frontend lives in a separate repo, devbounty-web.
Eigenvex — Perpetual futures protocol on Solana — hybrid orderbook + vAMM, cross-margin, DAO-curated listings
Perpetual futures protocol on Solana — hybrid orderbook + vAMM, cross-margin, DAO-curated listings
atlas-lend — _no description_
All contributions must follow the repository's issue and pull request templates.
Solidity0.1 — _no description_
no description
aave-solidity — _no description_
no description
flat list, no badge soup. depth in depth chart above.
🧠 languages solidity · rust · go · typescript · python · move · vyper · js
⚒️ contracts foundry · hardhat · openzeppelin · remix · anvil · safe · tenderly · oz-defender
🔗 web3 libs ethers.js · viem · wagmi · web3.js · web3.py · metamask-sdk
🧱 standards erc-20 · erc-721 · erc-1155 · erc-4626 · erc-2981 · erc-4337 · eip-2771 · eip-7702
🌉 cross-chain layerzero · wormhole · axelar · chainlink-ccip · hyperlane · fx-portal
⛓️ chains ethereum · arbitrum · optimism · base · polygon · zksync · bnb · solana
📊 oracles chainlink · pyth · redstone · api3
🛡️ security slither · echidna · mythril · foundry-invariants · halmos · certora · mythx
📡 data the-graph · goldsky · subquery · ponder · postgres · redis
☁️ infra docker · k8s · aws · gcp · prometheus · grafana · github-actions
- 📣 every state change emits an event
- 🔁 every external call's return value is checked
- 🧭 threat model is written before implementation, not after
- 🧮 no
uncheckedblock without a comment proving the math - 🔐 upgradability is a feature, not a default —
UUPSonly where it earns its rent
Slither + Foundry invariants + a manual pass against an explicit threat model. Reentrancy, oracle manipulation, access control, arithmetic edges.
- 🧪 solidity audits and pre-launch threat modelling
- 🌉 bridge / cross-chain message-integrity reviews
- 📏 invariant-suite design for new protocols
open-source pull requests across other repos — grouped by repo, capped at top
10 by volume. Auto-refreshed by scripts/update.sh.
Soju06/codex-lb · 25 PRs · all →
#846— test(api_keys): add coverage for limit_windows helpers (closes #845) ·open#829— feat(accounts): surface email-duplicate pairs in /api/accounts ·open#828— fix(sticky-sessions): chunk delete_entries to avoid sqlite bind overflow ·open#812— test(api-keys): add ApiKeyTable component tests ·merged#811— test(settings): add ImportSettings component tests ·merged#799— fix(accounts): reuse existing row on reauth for same ChatGPT identity (closes #788) ·open#798— docs(readme): lowercase codex provider name to match Codex 2026-05-23 update ·merged#744— fix(codex_version): fall back to npm registry when GitHub is rate-limited ·merged#743— chore(openspec): mark add-v1-api-key-usage tasks complete ·merged#721— fix(db): merge api_key_codex_model and sqlite_recovery alembic heads ·closed
solana-foundation/solana-go · 15 PRs · all →
#447— fix(rpc): default simulateTransaction Accounts.Encoding to base64 (closes #446) ·open#445— feat(address-lookup-table): one-call resolve for message lookups (closes #262) ·open#442— feat(rpc): forward MinContextSlot in getBalance/getLatestBlockhash/getSlot/getTokenAccountBalance ·open#441— fix(message): surface typedErrAddressTablesNotSetfrom AccountMetaList (closes #280) ·open#440— fix(token,token-2022): Build() sets Impl to *T, matching DecodeInstruction (closes #222) ·open#439— fix(token,token-2022): per-instruction ProgramID override (closes #254) ·open#436— feat(rpc): add NewWithCommitment / NewWithTimeout / NewWithTimeoutAndCommitment (#414) ·merged#434— feat(ws): support dataSlice in ProgramSubscribe ·merged#433— feat(ws): support dataSlice in AccountSubscribe ·merged#432— feat(ws): support enableReceivedNotification in SignatureSubscribe ·merged
cosmos/cosmos-sdk · 12 PRs · all →
#26474— fix(runtime): expose all autocli services, not just the last ·open#26453— test(baseapp): pin gRPC Query / FinalizeBlock concurrency safety ·merged#26452— feat(baseapp): emit gen-tx events on finalize-state EventManager ·closed#26427— fix(store/cachemulti): isolate traceContext map across branched stores ·merged#26426— feat(x/bank): add ValidateBounds for denom-metadata size caps ·closed#26423— fix(x/upgrade/plan): accept Windows .exe daemon in archive layouts ·closed#26422— fix(x/auth/tx): propagate signing options from codec to NewTxConfig ·merged#26415— perf(x/bank)!: skip HasAccount probe when recipient already has a balance ·open#26414— fix(cosmovisor): switch to staged upgrade binary on startup ·open#26399— fix(x/auth/tx)!: reject deprecated Pagination in GetTxsEvent ·open
ethereum/go-ethereum · 12 PRs · all →
#35061— core: drop tx-lookup entries during chain rewind (closes #33744) ·closed#35060— core/txpool/locals: protect journal.writer with a dedicated mutex (closes #34983) ·open#34981— go.mod: bump golang.org/x/net to v0.53.0 to fix GO-2026-4918 ·open#34980— p2p/nat: bump pion/stun to v3 to pull in fixed pion/dtls ·merged#34971— rpc: count error responses against batch response size limit ·closed#34970— core/txpool/blobpool: preserve limbo entry on update store failure ·open#34968— node: match vhost allowlist case-insensitively ·closed#34959— core/state/snapshot: make diskLayer.stopGeneration idempotent ·closed#34958— cmd/geth: report disk space cleared on prune-history completion ·open#34928— rpc: accept Windows reset error in websocket read limit test ·open
smartcontractkit/chainlink · 9 PRs · all →
#22460— fix(utils): accept json.Number in ToDecimal ·open#22459— fix(chainlink): deterministic ordering for /nodes pagination ·open#22428— fix(tools/benchmark): drop unnecessary $ on arithmetic variables (SC2004) ·open#22427— fix(cmd): enforce TLS 1.2 minimum in shell HTTP client ·open#22405— fix(deployment/solutils): validate archive paths to prevent Zip Slip ·open#22350— fix(scripts): make setup_testdb.sh runnable on Linux ·open#22267— docs: drop deprecated parity-ethereum / openethereum references ·open#22266— fix(bridges): treat bridge names case-insensitively on read and on create ·open#22265— fix(pipeline): reject partially-consumed input in JSONWithVarExprs ·open
issues opened by ozpool in other repos, split open / closed. Auto-refreshed
by scripts/update.sh.
Soju06/codex-lb · 1 issue
#845— test(api_keys): add coverage for limit_windows helpers
solana-foundation/solana-go · 1 issue
#446— simulateTransaction: SimulateTransactionAccountsOpts.Encoding defaults to empty string, validator rejects
no closed issues filed.
contribution heatmap — last 365 days. served by
ghchart.rshah.org,
tinted to match the cyan accents.
🌊 deep pool, slow drain.