Unified 2-pass security audit of CoinPay. 425 total findings (7 Critical, 98 High), 189 business impact risks verified including custody zero-key compromise, Lightning x402 payment self-verification, and plan escalation.
Unified 2-pass security audit of CoinPay. 425 total findings (7 Critical, 98 High), 189 business impact risks verified including custody zero-key compromise, Lightning x402 payment self-verification, and plan escalation.
· v2.0
Whitebox static analysis and Podman dynamic HTTP testing of the ThreatCrush monorepo. 40 total findings, highlighting RLS WITH CHECK admin escalation (CVSS 9.9) and unauthenticated root RCE in threatcrushd (CVSS 9.8).
· v1.0
Comprehensive security assessment of QryptChat messaging architecture. 56 Security Findings & 37 E-SWE flaws, covering participant conversation injection, unversioned RLS data leaks, and GHSA-3hqc-9v44-j37g disclosure.
· v2.0
Source code audit and dynamic exploitation of rssamplifier feed engine. 68 total findings, 36 verified business impact issues, featuring Stored XSS in public RSS feeds and unthrottled paid-API proxying.
· v1.0
Anonymized full-scope whitebox assessment of a real-time collaboration SaaS (web + Electron + mobile + Supabase). 170 confirmed findings (5 Critical, 17 High), 80 verified business impact issues including unauthenticated plan grants and account takeover chains.
· v1.0