Teja Nadh
Independent smart contract security researcher (~2 years) focused on Rust/Solana and Solidity/EVM. I find vulnerabilities in production systems, build deterministic PoCs (Foundry, Anchor, mainnet forks / live RPC), write root-cause reports, and practice responsible disclosure. I use modern AI tooling daily as a force multiplier and always re-verify against source and tests.
Experience
Independent Smart Contract Security Researcher
Self-Employed
Remote
Disclosed multiple high/critical issues across Solana and Ethereum protocols Built deterministic PoCs on mainnet forks and live RPC (Foundry, Anchor) Focus: oracles/liveness, ERC-4337 gas accounting, restaking/slashing, governance, bridges Collaborated on fixes/mitigations; maintain public writeups with honest severity notes
Education
B.Tech
Skills
SolidityRustCEthereum/EVMSolanaFoundryAnchorHardhatsolana-test-validatorDeFiaccount abstractionbridgesoraclesgovernancethreat modelingPoCsreportsresponsible disclosureAI
SELECTED PUBLIC RESEARCH
ERC-4337 EntryPoint v0.8 | Critical
postOp OOG charges beyond paymasterPostOpGasLimit
Kamino / Scope | High
Derived oracles stamp DatedPrice with refresh Clock, not source time
Symbiotic BaseSlasher | High
Phantom cumulative slash / shared-vault accounting desync
DEXE Governance | High
delegateTokens missing ifNotStaken (stake + vote double-use)
1inch Solana | High (privileged)
rescue_funds_for_order path after order close
Hyperbridge | High
Remote-call signature missing StateMachineId (replay class)