Hey! thisvishalsingh here! I'm a Security Researcher focused on Blockchain/DLT and Smart Contract Security, active since 2023.

I'm particularly interested in DeFI/Lending, Privacy(TEEs, MPC, FHE) and ZKP( Identity, DeFi, Payments, Prover Networks, zkVMs, Proof Verification, Coprocessors, ZK Rollups, ZK L1s, Cross Chain, ZKML/AI, ZK TLS, Private Compute, ZK in Bitcoin, Voting, CoSNARKs, Attestation Infrastructure). If you need some code to be reviewed, please reach out on X or telegram.

I am also the creator of ZippelLabs , a ZK proving toolstack for performance and security acceleration for zkVMs to prove Ethereum in real-time.

Solidity, Rust, Go, Circom, FunC, even Cairo: I find bugs in any language with above given intrestrd projects types (Defi-privacy & ZKPs)!

Ethereum, Solana, even Bitcoin: I find bugs in any stack!

Math, ZK, Cryptography, Solidity, Rust, Privacy, Smart Contracts & DLT.

• Security researcher

  • Private audits since (Q4 2024 - now)
  • competitive audits @Code4rena, @Sherlock, @Cantina & @Codehawks since (Q1 2024 - now)

• Blockchain Developer (Q2 2023 - Q3 2023)

• Software Developer(AI/Web-dev) (Q2 2021 - Q1 2023)

• Degrees

  • Bachelor's of Technology in Electronics & Communication Engineering
  • Bachelor's of Science in Computer Science

Public Profile

• Cantina x Spearbit: https://cantina.xyz/u/thisvishalsingh
• Sherlock: https://audits.sherlock.xyz/watson/thisvishalsingh

• ZK Proofs Security Part1 - Zero To One: ZK security can be grouped into four layers
• ZK Proofs Security Part2 — Zero to One: Should you pay for security audits for ZK SNARKs?
• ZK Proofs Security Research - Zero to One: Bug Classes - Assigned but not Constrained-1
• zkSNARKs security

• RadicalxChange - 3rd Rank : Highest bidder can withdraw his collateral due to a missing check in _cancelAllBids
• Sorella Angstrom - 4th Rank(10xCrit-Patrol team) : Fees can be stolen by changing the initialized ticks
• Geneius Contracts - 6th Rank : DoS in Solana vai order_hash collision during filling orders
• Nitro-Labs/Solaxy - 8th Rank : Stale owner index lets attackers create “ghost” programs and exhaust resources
• Napier - 9th Rank : Loss of funds due to not collecting fees
• FarcasterAttestation 16th Rank: The lack of ERC-165 compliance leads to integration failures