Hey, I’m Thomas 👋
I help protocol teams find deep bugs and ship with confidence.
📫 How to reach me: blltprf.xyz · webintake@blltprf.xyz · @audithare
Availability: limited — open to audits & verification engagements → Book a 30 min call or Start an audit
- 🔍 Code Review & Security Audits — humans see nuance; tools miss context.
- 🧪 Fuzzing & Simulation — targeted harnesses for high path coverage and reproducible failures.
- 📐 Formal Modeling & Verification — prove protocol properties with machine-checked guarantees.
- 🧭 Security Strategy & Training — design for safety; ship with confidence.
- 🔥 [redacted] — formal verification of Solidity components with Quint & Apalache
- 🛡️ Independent audits/code reviews (Cantina, Code4rena, Sherlock)
- 💙 Core team: Apalache — symbolic model checker for TLA+ & Quint
- 🍩 3-slot finality (3SF) — formal modeling & accountability proofs (Ethereum) · repo
- 🧪 Protocol fuzzing workshop @ Protocol Berg v2 · repo
Soroban smart contract audit — focus on authentication & authorization · TBA
- 🌟 Solarkraft — runtime verification for Soroban/Stellar smart contracts · repo
- 🎠 Improving Apalache to find bugs in smart contracts, dApps, and protocols · repo
- 🍭 Quint — modern language/tooling for TLA+ specs · repo
🛠️ Languages: Solidity · Rust · Go · Lean · Python · TypeScript
📐 Verification: Alloy · Lean4 · Certora Prover · Quint/TLA+ · SMT (CVC5, Z3)
🧪 Fuzzing: AFL · cargo-fuzz · libFuzzer · Echidna/Medusa · Wake