Thomas Heim

Smart Contract Security Researcher

Security isn't a checkbox, it's a continuous process!

Smart Contract

Security

10+

Protocols Audited

50+

Vulnerabilities Found

Up-to-Date

Always Up-to-Date with Latest Security Practices

My Approach

  • Manual code review for in-depth analysis
  • Static analysis tools for comprehensive scanning
  • Formal verification for critical components
  • Mutation testing to ensure test suite quality
  • Fuzz testing for unexpected inputs and edge cases
  • Thorough unit testing for individual components
  • Adopting a hacker's mindset for creative problem-solving
  • Continuous learning and staying updated with emerging vulnerabilities

Audit Reports

Competitive Audits

Zaros Part 1
2024
Loading...
Zaros Part 1

Zaros is a Perpetuals DEX with Boosted Staking Vaults. It seeks to maximize LPs yield generation, while offering a top-notch trading experience on Arbitrum

2low
DEX
Staking
MyCut
2024
Loading...
MyCut

MyCut is a contest rewards distribution protocol which allows the set up and management of multiple rewards distributions, allowing authorized claimants 90 days to claim before the manager takes a cut of the remaining pool and the remainder is distributed equally to those who claimed in time!

1high
Rewards
Distribution
Mystery Box
2024
Loading...
Mystery Box

MysteryBox is a thrilling protocol where users can purchase mystery boxes containing random rewards! Open your box to reveal amazing prizes, or trade them with others. Will you get lucky and find the rare treasures?

3high
1medium
NFT
Randomness
T-Swap
2024
Loading...
T-Swap

T-Swap is a decentralized asset/token exchange (DEX). T-Swap is known as an Automated Market Maker (AMM) because it doesn't use a normal order book style exchange, instead it uses Pools of an asset. It is similar to Uniswap.

4high
1medium
2low
DEX
Audit
Voting Booth
2024
Loading...
Voting Booth

This contract allows the creator to invite a select group of people to vote on something and provides an eth reward to the 'for' voters if the proposal passes, otherwise refunds the reward to the creator.

1medium
Voting
Proposal

Normal Audits

Boss Bridge
2024
Loading...
Boss Bridge

In a nutshell, the bridge allows users to deposit tokens, which are held into a secure vault on L1. Successful deposits trigger an event that our off-chain mechanism picks up, parses it and mints the corresponding tokens on L2.

4high
1medium
3low
DeFi
Bridge
T-Swap
2024
Loading...
T-Swap

T-Swap is a decentralized asset/token exchange (DEX). T-Swap is known as an Automated Market Maker (AMM) because it doesn't use a normal order book style exchange, instead it uses Pools of an asset. It is similar to Uniswap.

5high
2low
DeFi
DEX
Thunder Loan
2024
Loading...
Thunder Loan

The ⚡️ThunderLoan⚡️ protocol is meant to do the following: 1. Give users a way to create flash loans 2. Give liquidity providers a way to earn money off their capital

3high
2medium
3low
DeFi
Flash loan
Vault Guardians
2024
Loading...
Vault Guardians

This protocol allows users to deposit certain ERC20s into an ERC4626 vault managed by a human being, or a vaultGuardian. The goal of a vaultGuardian is to manage the vault in a way that maximizes the value of the vault for the users who have deposited money into the vault.

3high
1medium
2low
Yield Farming
DeFi
PasswordStore
2023
Loading...
PasswordStore

PasswordStore is a simple solidity protocol meant to allow the owner to store and retrieve their password securely. Never worry about forgetting your password again!

2high
DeFi
Store
Puppy Raffle
2023
Loading...
Puppy Raffle

This project is to enter a raffle to win a cute dog NFT.

4high
4medium
DeFi
NFT

Bug Bounty Reports

Coming Soon...