Web3 Security Researcher

Aayushman
Thapa Magar

Smart contract auditor and security researcher specializing in finding vulnerabilities in Web3 protocols and applications.

Experience across Solidity, Rust, and Move-based systems, including DeFi, vaults, bridges, governance, infrastructure and ZK security.

Scroll to explore
Boundless Marketplace
Boundless Marketplace
Centiiv
Centiiv
CoreDAO Z-protocol
CoreDAO Z-protocol
GlazeCorp
GlazeCorp
Navi Protocol
Navi Protocol
SocketFi
SocketFi
Aztec Governance
Aztec Governance
Mokshya Protocol
Mokshya Protocol
Untangled Vault
Untangled Vault
Mina NFT Standard
Mina NFT Standard
Navi Volo Vaults
Navi Volo Vaults
Boundless Marketplace
Boundless Marketplace
Centiiv
Centiiv
CoreDAO Z-protocol
CoreDAO Z-protocol
GlazeCorp
GlazeCorp
Navi Protocol
Navi Protocol
SocketFi
SocketFi
Aztec Governance
Aztec Governance
Mokshya Protocol
Mokshya Protocol
Untangled Vault
Untangled Vault
Mina NFT Standard
Mina NFT Standard
Navi Volo Vaults
Navi Volo Vaults

20+

Security Reviews

5+

Blockchains and ecosystems

4+

Years in Security

∞

Things to Break

Experience

Security experience spanning Web2 application security and dedicated Web3 protocol research.

2025 — 2026

Veridise Inc.

Security Analyst

Performed security audits of Web3 protocols and smart contracts across Solidity, Move, and Rust ecosystems. Identified critical-severity vulnerabilities and validated findings through manual analysis, fuzzing, and automated security testing.

SolidityMoveRustSlitherOrCaVanguard
2024 — 2025

Mokshya Protocol

Security Researcher — In-house

Conducted internal security reviews of Solidity and Move smart contracts alongside vulnerability assessments of internal applications and infrastructure.

SolidityMoveVAPTSecurity Research
2022 — 2024

CryptoGen Nepal

Offensive Security Analyst

Performed penetration testing and vulnerability assessments across web, network, mobile, and API environments. Produced technical security reports and communicated findings and remediation recommendations to clients.

WebAPIMobileNetworkVAPT

Expertise

Security work across the Web3 stack.

01Security

Smart Contract Security

Manual and automated security reviews of smart contracts across DeFi, vaults, bridges, governance and protocol infrastructure.

SolidityRustMove
02Security

Vulnerability Research

Deep analysis of attack surfaces, protocol invariants and business logic to identify vulnerabilities and validate practical exploitability.

FuzzingPoC DevelopmentThreat Modeling
03Security

Web3 Application Security

Security testing of Web3 applications and supporting infrastructure, including APIs, authentication, access control and application-layer attack surfaces.

VAPTAPI SecurityApplication Security
04Security

ZK Security Research

Security analysis of zero-knowledge systems and circuits, with experience working with modern ZK development ecosystems.

Circomo1jsZK Research

Get in touch

Let's talk security.

Building a protocol, application, or infrastructure that needs a security review? Send me some details and I'll get back to you.

AVAILABLE FOR SECURITY AUDITS & VAPT