-

# [Kiki's](https://twitter.com/Kiki_developer) Audits, Bounties, and Contributions To book a private audit, reach me directly via [Telegram](https://t.me/kiki_dev) * **3+** years experience * **50+** audits * **15+** bounties I've helped secure over $3 billion through independent audits, bug bounties, and primarily collaborations with top security firms such as [Enigma Dark](https://www.enigmadark.com/), [Bail Security](https://bailsec.io/), & [Guardian Audits](https://guardianaudits.com/). --- ## What Others Have To Say > "No bullshit: this 'private auditor' audit was much smoother than what we had with audit companies. From the first two days of the audit I could definitely tell that Kiki is a senior security researcher and his findings were pure gold!" > > **Solomon** > Lead Developer, [Stable Jack](https://x.com/StableJack_xyz) --- > "I appreciated the depth that Kiki normally and continuously scrutinized the contracts with. Prior audits I had been a part of felt a bit superficial compared to Kiki's thoroughness in his approach, his thinking, and his explanations of his findings. Kiki was also very collaborative and available as well to answer questions or to brainstorm on fixes. I came out of the audit with a measurably greater confidence in the contracts." > > **Honkers** > Lead Developer, [Gloop](https://x.com/gloopfinance) --- > "The detail and clarity that Kiki provides around potential issues is exceptional. It makes the resolution process a breeze." > > **Cain** > Lead Developer, [Hyperdrive](https://x.com/hyperdrivedefi) ## Private Audits | Reports | | |:--------------|:--| | Undisclosed - OFT & LST
_{Bail Security - November 2025} | Undisclosed - Oracle & Staking
_{Enigma Dark - November 2025} | | Undisclosed - CLAMM & Voting Escrow
_{Bail Security - November 2025} |Undisclosed - PancakeSwapV3 Integration
_{Enigma Dark - October 2025}| |Undisclosed - Liquid Restaking
_{Bail Security - September 2025} |Undisclosed - Options Sales
_{Bail Security - September 2025}| | Undisclosed - Rewards
_{Enigma Dark - September 2025}|Undisclosed - LST
_{Enigma Dark - August 2025}| | Undisclosed - Yield Aggregator
_{Bail Security - August 2025} | Undisclosed - LST
_{Enigma Dark - August 2025}| | Undisclosed - Borrowing & Lending
_{Enigma Dark - July 2025}| [Camelot - Launchpad & Options Sales](https://github.com/bailsec/BailSec/blob/main/Bailsec%20-%20Camelot%20-%20Grail%20-%20Final%20Report.pdf)
_{Bail Security - June 2025} | | Undisclosed - Borrowing & Lending
_{Enigma Dark - May 2025}| [Silo V2 - Borowing & Lending](https://x.com/SiloFinance)
_{Enigma Dark - April 2025} | | Undisclosed - LST
_{Enigma Dark - May 2025} | [Arrakis - Uniswapv4 & PancakeSwapv4 Integration](https://github.com/Enigma-Dark/security-review-reports/blob/main/2025-04_Security_Review_Arrakis_Finance_Arrakis_Modular_PancakeSwap_V4_%26_%20Uniswap_V4_Modules.pdf)
_{Enigma Dark - April 2025} | | [Stable Jack - OFT, Staking, & Vesting](Engagements/4:2:25_StableJack_Final_Report.pdf)
_{Independent - April 2025} | [Hyperdrive - Yield Strategies Protocol](Engagements/3:5:25_Hyperdrive_Final_Report.pdf)
_{Independent - March 2025} | | [Gloop - Lending Protocol](Engagements/3:14:25_Gloop_Final_Report.pdf)
_{Independent - March 2025} | [Ambit Finance - Lending Protocol](Engagements/Ambit_Finance_Final_Report.pdf)
_{Independent - January 2025} | | [Hyperdrive - Yield Strategies Protocol](Engagements/3:8:25_Hyperdrive_Final_Report.pdf)
_{Independent - March 2025} | [Ambit Finance - Lending Protocol](Engagements/4:22:24_Ambit_Final_Report.pdf)
_{Independent - April 2024} | | [Poodl - Dividend Paying Token](Engagements/PoodlAuditTeam2.md)
_{Guardian Defender - March 2023} | [Raisin Labs - Peer to Peer Fundraiser](Engagements/Raisin_Audit.pdf)
_{Guardian Defender - February 2023} | ## Guardian Audits | Reports | | |:----------------|:----------------| | [Bracket - Liquid Staking Token](https://2328915316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXs79h1Fq9RF5CisvRcu8%2Fuploads%2FFaRAPSHltXHNCTIsWs78%2FBracket%20Rd.2%20-%20LST%20Vault_report.pdf?alt=media&token=f93d5d12-a112-4976-a66d-8f5cb069ef0d)
_{March 2025} | [GMX V2 V2.1 - Perpetual](https://github.com/GuardianAudits/Audits/blob/main/GMX/2024-06-14_GMX_Updates_2.pdf)
_{June 2024} | | [Ethereal - Spot and Perpetual](https://github.com/GuardianAudits/Audits/blob/main/Ethereal/2025-02-10_Ethereal_Vault.pdf)
_{February 2025} | [GMX V2 V2.1 - Perpetual](https://github.com/GuardianAudits/Audits/blob/main/GMX/2024-06-14_GMX_Updates_1.pdf)
_{May 2024} | | [USDT0 - USDT to USDT0 Migration](https://github.com/GuardianAudits/Audits/blob/main/USDT0/USDT_Arbitrum_Upgrade.pdf)
_{January 2025} | Undisclosed - GMX V2 Integration
_{April 2024} | | [GMX V2 Gasless - Perpetual](https://github.com/GuardianAudits/Audits/blob/main/GMX/2025-02-27_GMX_Gasless.pdf)
_{January 2025} | Undisclosed - Staking
_{March 2024} | | [Orderly - Order Book](https://github.com/GuardianAudits/Audits/blob/main/Orderly/2025-02-24_Orderly_Vault.pdf)
_{January 2025} | Undisclosed - GMX V1 Integration
_{March 2024} | | [Umami - GMX V2 Market Index](https://github.com/GuardianAudits/Audits/blob/main/Umami/2025-01-26_Umami_GMX_PositionManager.pdf)
_{January 2025} | [Rest - EigenLayer Integration](https://github.com/GuardianAudits/Audits/blob/main/RestFinance/2024-01-26_Rest_Finance.pdf)
_{January 2024} | | [Umami eGMX - Escrowed GMX Utility](https://github.com/GuardianAudits/Audits/blob/main/eGMX/2025-01-22_eGMX.pdf)
_{December 2024} | [Umami - GMX V2 Index](https://github.com/GuardianAudits/Audits/blob/main/Umami/2024-01-10_Umami.pdf)
_{December 2023} | | [SmarDex - Sythnetic Dollar](https://github.com/GuardianAudits/Audits/blob/main/Smardex/12-18-2024_Smardex_USDN.pdf)
_{December 2024} | [Ambit - Borrowing & Lending](https://github.com/GuardianAudits/Audits/blob/main/Ambit/2023-12-06_Ambit.pdf)
_{November 2023} | | [Foil - Perpetual for Gas Prices](https://github.com/GuardianAudits/Audits/blob/main/Foil/2024-10-28_Foil.pdf)
_{September 2024} | [Dolomite - GMX V2 Module](https://github.com/GuardianAudits/Audits/blob/main/Dolomite/2024-01-11_Dolomite.pdf)
_{November 2023} | | [GMX V2 GLV - GM Token Vault](https://github.com/GuardianAudits/Audits/blob/main/GMX/2024-09-03_GMX_GLV.pdf)
_{September 2024} | [Parifi - Perpetual](https://github.com/GuardianAudits/Audits/blob/main/PariFi/2024-01-24_PariFi.pdf)
_{October 2023} | | Undisclosed - GMX V2 Integration
_{August 2024} | [Orderly - Order Book](https://github.com/GuardianAudits/Audits/blob/main/Orderly/2023-10-25_Orderly.pdf)
_{October 2023} | | Undisclosed - Token Launch
_{July 2024} | [IVX - Options](https://github.com/GuardianAudits/Audits/blob/main/IVX/09-13-2023-IVX.pdf)
_{September 2023} | | Undisclosed - Pyth integration
_{July 2024} | [Poolshark - Directional AMM](https://github.com/GuardianAudits/Audits/blob/main/Poolshark/Poolshark_Limit_Audit.pdf)
_{July 2023} | | [Synthetix V3 - Perpetual](https://github.com/GuardianAudits/Audits/blob/main/Synthetix/2025-03-03_Synthetix_BFP_2.pdf)
_{July 2024} | [GMX V2 - Perpetual](https://github.com/GuardianAudits/Audits/blob/main/GMX/2023-05-15_GMX_Synthetics.pdf)
_{May 2023} | ## Bug Bounties | Bug Bounties | | |:-------------|:--| | [Miscalculation Will Continuesly Locks Funds in Vault](Bounties/018.md)
_{August 2025 · Vault · Medium} |[Artificial Deflation of State Variable Will Lock Funds](Bounties/017.md)
_{August 2025 · Vault · High} | | [Pool Funds can be Siphoned to External Protocol](Bounties/016.md)
_{May 2025 · Leveraged Trading · Critical} | [Attacker Can Brick Operations In and Out of GMX V2](Bounties/007.md)
_{January 2024 · Lending & Borrowing · Medium} | | [Attacker Can Liquidate All Healthy Positions](Bounties/013.md)
_{February 2024 · Perpetual · Critical} | [First Depositor Can Steal Funds From Vault](Bounties/003.md)
_{November 2023 · Derivatives protocol · Medium} | | [Attacker Can lock all funds](Bounties/015.md)
_{February 2024 · Perpetual · Medium} | [Attacker Can Steal From Options Writers](Bounties/006.md)
_{August 2023 · Options Exchange · High} | | [Reward tokens Can be Locked](Bounties/012.md)
_{January 2024 · Yield Aggregator and LST · Medium} | [Attacker Can DoS the Settlement of Options](Bounties/005.md)
_{August 2023 · Options Exchange · High} | | [Attacker Can Steal Funds With Elastic Supply Tokens](Bounties/002.md)
_{June 2023 · Staking Launchpad · Low} | [Attacker Can Buy Option for 0 Premium](Bounties/004.md)
_{August 2023 · Options Exchange · High} | | [Duplicates :( ](Bounties/Duplicates/README.md)
| | ## Contest | Contest | Date | Platform | My Findings | |:--------|:-----|:---------|:------------| |[USSD](https://audits.sherlock.xyz/contests/82/report)|May 2023|Sherlock|[8H, 3M](Contests/ussd)| |[Footium](https://audits.sherlock.xyz/contests/71/report)|April 2023|Sherlock|[1H, 2M](Contests/footium)| |[Caviar](https://code4rena.com/reports/2023-04-caviar)|April 2023|Code4rena|[3M](Contests/caviar/second)| |[Olympus](https://audits.sherlock.xyz/contests/50/report)|February 2023|Sherlock|[1M](Contests/olympus)| |[OpenQ](https://audits.sherlock.xyz/contests/39)|February 2023|Sherlock|[1H, 2M](Contests/openq)| |[Surge](https://audits.sherlock.xyz/contests/51/report)|February 2023|Sherlock|[1M](Contests/surge)| |[Cooler](https://audits.sherlock.xyz/contests/36)|January 2023|Sherlock|[1H, 1M](Contests/cooler)| |[Caviar](https://code4rena.com/reports/2022-12-caviar)|December 2022|Code4rena|[1M](Contests/caviar/first)| |[GogoPool](https://code4rena.com/reports/2022-12-gogopool)|December 2022|Code4rena|[1M](Contests/gogo_pool)| |[Escher](https://code4rena.com/reports/2022-12-escher)|December 2022|Code4rena|[1H, 1M](Contests/escher)| ## Contributions - [8 Common Smart Contract Vulnerabilities Found Throughout Audit Contest](https://medium.com/@kiki.auditor/8-common-smart-contract-vulnerabilities-found-throughout-audit-contest-d8f19c494f7e) - [OA - Small Platform for security researchers to practice writing PoCs and find vulnerabilites](https://github.com/0xLanterns/OA)