Thomas Heim
Smart Contract Security Researcher
Security isn't a checkbox, it's a continuous process!
Smart Contract
Security
10+
Protocols Audited
50+
Vulnerabilities Found
Up-to-Date
Always Up-to-Date with Latest Security Practices
My Approach
- Manual code review for in-depth analysis
- Static analysis tools for comprehensive scanning
- Formal verification for critical components
- Mutation testing to ensure test suite quality
- Fuzz testing for unexpected inputs and edge cases
- Thorough unit testing for individual components
- Adopting a hacker's mindset for creative problem-solving
- Continuous learning and staying updated with emerging vulnerabilities
Audit Reports
Competitive Audits
Zaros is a Perpetuals DEX with Boosted Staking Vaults. It seeks to maximize LPs yield generation, while offering a top-notch trading experience on Arbitrum
MyCut is a contest rewards distribution protocol which allows the set up and management of multiple rewards distributions, allowing authorized claimants 90 days to claim before the manager takes a cut of the remaining pool and the remainder is distributed equally to those who claimed in time!
MysteryBox is a thrilling protocol where users can purchase mystery boxes containing random rewards! Open your box to reveal amazing prizes, or trade them with others. Will you get lucky and find the rare treasures?
T-Swap is a decentralized asset/token exchange (DEX). T-Swap is known as an Automated Market Maker (AMM) because it doesn't use a normal order book style exchange, instead it uses Pools of an asset. It is similar to Uniswap.
Normal Audits
In a nutshell, the bridge allows users to deposit tokens, which are held into a secure vault on L1. Successful deposits trigger an event that our off-chain mechanism picks up, parses it and mints the corresponding tokens on L2.
T-Swap is a decentralized asset/token exchange (DEX). T-Swap is known as an Automated Market Maker (AMM) because it doesn't use a normal order book style exchange, instead it uses Pools of an asset. It is similar to Uniswap.
The ⚡️ThunderLoan⚡️ protocol is meant to do the following: 1. Give users a way to create flash loans 2. Give liquidity providers a way to earn money off their capital
This protocol allows users to deposit certain ERC20s into an ERC4626 vault managed by a human being, or a vaultGuardian. The goal of a vaultGuardian is to manage the vault in a way that maximizes the value of the vault for the users who have deposited money into the vault.
PasswordStore is a simple solidity protocol meant to allow the owner to store and retrieve their password securely. Never worry about forgetting your password again!