Audit portfolio

This repository highlights zeroK, showcasing my expertise and achievements as bug hunter and security researcher in the Web3 security field.

• About zeroK
• Expertise
• top 5 reports
• Attackathon
• Invite-only-program
• contests
• Bug bounties
• private audit

About zeroK

I'm security researcher with two years of experience in the Web3 security field. Specializing in Solidity, Sway, EVMs, fuelVM ,and DeFi protocols. Starting as a warden on CodeArena then i transitioned to bug hunting on Immunefi, achieved Elite Rank in just 8 months from zero programming background. You can explore my Immunefi portfolio here, I've been actively involved in contests and bug bounties on Immunefi, and found over 30 valid reports Lately, I have started providing private security reviews in the Web3 space. If you’re interested in getting a quick and professional private quote, feel free to reach out via:

• Telegram @zero0K.
• X account @ZeroK_____
• Discord @zerok___.

Expertise

Expertise	Proficiency
Solidity	⚡⚡⚡⚡⚡
EVM	⚡⚡⚡⚡⚡
sway	⚡⚡⚡⚡⚡
cairo	⚡⚡⚡
fuel VM	⚡⚡⚡⚡⚡
DEFI(perp, lend-borrow, AMM, LST, LRT, stablecoin, etc...)	⚡⚡⚡⚡⚡

my top 5 reports

This list includes the top reports from my participation in contests and attackathons. Please note that the details for BBP reports are not shared publicly yet, as permission required for the BBP reports. This list is subject to change as I discover new creative and worthy bugs.

Contest/BBP/Attackathon	Status	Work Duration	Severity	State	Report	Platform
Fuel Attackathon	PAID	17-20 days	HIGH	Chief Finder	Link	Immunefi
Fuel Attackathon	PAID	17-20 days	HIGH	Chief Finder	Link	Immunefi
ThunderNFT	PAID	17 days	HIGH	Chief Finder	Link	Immunefi
ThunderNFT	PAID	17 days	Medium	Chief Finder	Link	Immunefi
ALCHEMIX veALCX	PAID	7-10 days	Medium	Chief Finder	Link	Immunefi

Attackathon on Immunefi

attackathon	Status	Rank	Work Duration	vulnerability discovered	Report	Platform
fuel attackathon	PAIDs	5th	17-20 days	3 high, 5 low/insights	Link	Immunefi

Invite only program (IOP) on Immunefi

IOP	Status	Rank	Work Duration	vulnerability discovered	Report	Platform
ThunderNFT	PAIDs	2th	17 days	3 high, 2 medium, 3 low/insights	Link	Immunefi
Term Structure Lab	PAIDs	1th	9 days	2 critical, 2 high, 1 medium, 2 low/insights	Link	Immunefi

contest/boost on Immunefi

Contest/boost	Status	Rank	Work Duration	vulnerability discovered	Report	Platform
ALCHEMIX veALCX	PAIDs	15th	7-10 days	2 critical, 1 medium, 1low	Link	Immunefi

Bug bounties

Contest	status	work Duration	Severity	Report	Platform
APE coin	PAID	12 days	Medium	waiting for permission	Immunefi
waiting for permission	NOT PAID (non-mentioned known issue)	6 days	Critical	waiting for permission	Immunefi
waiting for permission	PAID	6 days	Low	waiting for permission	Immunefi
waiting for permission	PAID	15 days	Medium	waiting for permission	Immunefi
waiting for permission	PAID	4 days	Low	waiting for permission	Immunefi

private audit

I started performing private audits in January 2025 and have since completed one audits, I worked diligently to identify and address potential vulnerabilities, ensuring the clients codebases were as secure and reliable as possible. you can explore all of my private audits below.

Private Audit	Required Duration	Client Platform/Website	Vulnerability Discovered	Report
guanciale veGuan	5 days	link	12 Vulnerability	link