A running portfolio of smart-contract security findings I've produced in competitive audits and practice reviews. Each finding is written like a real audit report entry, with a reproducible Foundry PoC where possible.
Format follows the standard severity model (High / Medium / Low / Informational). Findings from live contests are published only after the contest ends and results are public, to respect platform rules.
| # | Title | Severity | Target | PoC |
|---|---|---|---|---|
| — | (your first finding goes here) | — | — | — |
findings/
YYYY-MM-DD_<target>_<short-title>.md # one file per finding (use _TEMPLATE.md)
Reentrancy · access control · signature/replay · front-running/MEV · arithmetic (overflow/precision) · DoS / gas griefing · business-logic invariant violations.
Profiles that auto-aggregate these: [CodeHawks] · [Code4rena] · [Solodit] — links added once live.