SecuritySmart Contract Security Best Practices
The checks that catch the most bugs before an audit: invariant tests, access-control review, and reasoning about external calls.
Publishing soon
Available for security research & AI engineering work
Building Secure
Web3 Infrastructure
with AI
Blockchain Security Researcher specializing in smart contract security, artificial intelligence, blockchain infrastructure, autonomous AI agents, cloud systems, and Web3 automation.
- 6
- Featured projects
- 2022
- Building since
- AI · Security · Web3
- Focus areas
- Independent
- Work
Profile
About Me
I design and build AI-powered blockchain infrastructure, security platforms, autonomous AI agents, smart contract tooling, cloud-native backend systems, and Web3 automation.
My work combines security research, distributed systems, artificial intelligence, and scalable infrastructure.
Day to day that means reading contracts closely, shipping backend systems that stay up, and giving AI agents enough structure to be useful without being dangerous.
Focus areas
Smart Contract Security
AI Agents
Blockchain Infrastructure
DeFi
Layer 2 Ecosystems
Cross-chain Systems
Automation
Bug Hunting
Open Source
Working stack
AI · Chain
Eleven tools I reach for most across security, AI, and infrastructure work.
- 0
- Featured projects
- 0
- Technology areas
- 0
- Building since
Journey
- 2022
Started blockchain development
Began building on EVM chains: first Solidity contracts and the fundamentals of decentralised systems.
- 2023
Moved into security research
Shifted focus to vulnerability research — reading contracts, studying historical exploits, and mapping common attack surfaces.
- 2024
AI automation systems
Started building LLM-driven automation: multi-provider orchestration, tool execution, and agentic workflows.
- 2025
Web3 infrastructure
Built out backend pieces — RPC access, indexing, wallet integration, and containerised deployment.
- 2026
Autonomous agents
Working on agents that reason, plan, and act across blockchain and cloud environments.
Experience
2023 — Present
Blockchain Security Research
Independent
Self-directed research into smart contract vulnerabilities, exploit techniques, and Web3 security practices.
- Read and analyse contracts to build a working catalogue of vulnerability patterns
- Study post-mortems of historical exploits to understand root causes
- Write and run Foundry test cases that reproduce known attack classes
2024 — Present
AI Agent Development
Independent
Building autonomous agents that reason, hold memory, execute tools, and run multi-step workflows.
- Design agent loops covering planning, tool execution, and failure recovery
- Integrate multiple LLM providers behind one interface with failover
- Operate agents through Telegram as the control surface
2022 — Present
Web3 Engineering
Independent
Building blockchain utilities, automation tooling, and the backend infrastructure they run on.
- Write wallet monitoring and on-chain automation tooling
- Build read paths against EVM chains with RPC and indexer layers
- Containerise and deploy services on Linux with reverse proxying
Selected work
Featured projects
Autonomous agents, security research, and the infrastructure underneath them. Each card states what is public and what is not — several are private or still prototypes, and the status label says which.
FeaturedAI AgentsConcept artPRIVATEPrivate projectSource not public
Hermes AI Agent
Autonomous agent runtime with persistent memory, tool execution, and multi-provider reasoning, operated through Telegram.
PythonFastAPIClaudeGeminiOpenRouterSQLiteDockerTelegram
Case studyNo public repo or demo
FeaturedInfrastructureConcept artPROTOTYPEOriginal workWorking build, not publicly deployed
9Router AI Platform
LLM routing layer that presents one API across OpenAI, Claude, Gemini, and OpenRouter, with health-based routing and failover.
Next.jsTypeScriptRedisNode.jsDockerOpenAI API
Case studyNo public repo or demo
FeaturedSecurityConcept artRESEARCHResearch / PoCOngoing, no public artifact
Blockchain Security Research
Ongoing research into smart contract vulnerability classes, MEV, and protocol attack surfaces, with reproductions written as Foundry tests.
SolidityFoundryRustPythonSlither
Case studyNo public repo or demo
InfrastructureConcept artPRIVATEPrivate projectPersonal tooling, source not public
Web3 Automation Toolkit
Personal tooling for wallet monitoring, multi-chain read operations, and Telegram-delivered alerts.
PythonNode.jsDockerWeb3.pyTelegram
Case studyNo public repo or demo
SecurityConcept artPROTOTYPEOriginal workIn development, not released
Smart Contract Auditor
Analysis pipeline that runs static analysis over Solidity sources and groups findings into a reviewable report.
SolidityFoundryTypeScriptSlither
Case studyNo public repo or demo
AnalyticsConcept artPROTOTYPEOriginal workLocal build, not publicly deployed
Blockchain Intelligence Dashboard
Interface over on-chain activity: address monitoring, transaction views, and charting on top of indexed data.
ReactNext.jsChart.jsNode.jsEthers.js
Case studyNo public repo or demo
Open source
Repositories & experiments
Public repositories from my GitHub. Some are original work and some are forks — each card links straight to the repo, and anything not yet confirmed is marked rather than claimed.
echogarden-poc(opens in a new tab)
Details pending verification.
Pending verificationsoundness-attention-miner(opens in a new tab)
Details pending verification.
Pending verificationbandidozeth(opens in a new tab)
Details pending verification.
Pending verificationsail(opens in a new tab)
Details pending verification.
Pending verificationseal(opens in a new tab)
Details pending verification.
Pending verificationseal02(opens in a new tab)
Details pending verification.
Pending verificationseal-sui(opens in a new tab)
Details pending verification.
Pending verificationAleo-tictato(opens in a new tab)
Details pending verification.
Pending verificationSolana-arbitrage-bot(opens in a new tab)
Details pending verification.
Pending verificationpolymarket-trading-bot(opens in a new tab)
Details pending verification.
Pending verification
Proof of work
Check it yourself
Public destinations rather than claims. Most project work sits in private repositories, so this list is deliberately short — it will grow as repos and deployments go public.
- GitHub(opens in a new tab)Public activity and repositories. Most project work is in private repos, so what is visible here is a subset.
- bandidoz.xyz(opens in a new tab)Personal site and writing.
- X(opens in a new tab)Notes on security research and AI engineering as I work.
- Telegram(opens in a new tab)Direct contact for project and research conversations.
What I offer
Services built for Web3 & AI
Six areas I work in end to end — from autonomous agents and contract review through to the cloud systems that keep them running.
AI Agent Development
Autonomous agents that reason, plan, execute tools, hold memory, and orchestrate multi-step workflows.
- Reasoning & planning
- Tool execution
- Workflow orchestration
Blockchain Security
Smart contract audits, exploit research, vulnerability analysis, and security architecture review.
- Contract audits
- Exploit research
- Security architecture
Web3 Infrastructure
RPC layers, wallet integrations, backend APIs, indexers, and the automation that ties them together.
- RPC & indexers
- Wallet integrations
- Backend APIs
Cloud Engineering
Containerized, observable deployments on Linux and AWS with pipelines built to ship safely.
- Docker & AWS
- Nginx & Linux
- CI/CD & monitoring
Security Research
Blockchain intelligence, wallet investigation, protocol analysis, and on-chain forensics.
- Wallet investigation
- Protocol analysis
- On-chain forensics
Automation Systems
Telegram and Discord bots, browser automation, AI workflows, and backend job orchestration.
- Telegram & Discord bots
- Browser automation
- AI workflows
Tech stack
Technologies & expertise
Grouped by layer — from the languages and frontend through to AI models and the chains they work with.
Writing
In the works
Planned pieces on smart contract security, autonomous agents, MEV, and running Web3 infrastructure under load. None are published yet — the titles below are what I am writing, not links.
SecurityAIAI Agents in Web3
Where autonomous agents genuinely help on-chain, where they add risk, and how to bound what an agent is allowed to sign.
Publishing soonResearchUnderstanding MEV
How ordering value is extracted, what sandwiching and backrunning look like in the mempool, and the protections available today.
Publishing soonAIBuilding Autonomous AI Systems
Memory, planning loops, tool execution, and failure handling — the parts of an agent that decide whether it survives production.
Publishing soonInfrastructureBlockchain Infrastructure at Scale
RPC fan-out, indexer lag, and reorg handling: the operational realities of running Web3 backends under load.
Publishing soonGet in touch
Have a project or research idea? Let's build it.
Open to security research, smart contract review, AI agent work, and Web3 infrastructure. The form reaches my inbox directly, or use any channel below.