Portfolio

Critical, $75,000 bounty

Critical bug in the validator, reported through Cantina. My first critical from a bug bounty—LLMs played a big role in finding it.

Medium–High, $10,000 bounty

Bug in the MasterChef contract.

High, $5,000 bounty

Bug in the voting website.

Critical, $1,000 bounty

Bug in the P2P node.

Authentication / authorization

A missing check in admin-api allowed tampering with the cross-border personal data transfer notice on any app's Kakao Login consent screen.

Authentication / authorization

Comment permissions were checked against the activity ID in the URL, so a user whose access had been revoked could still read and delete private comments.

Stored Cross-Site Scripting

Stored XSS via the app name on the Kakao Login consent guide page.

High (CVSS 7.5)

The strict transaction-validation cache key omitted the block time, so nodes could disagree on block validity—leading to a consensus split and permanent sync failure. Fixed in midnight-node 1.0.300.

Processing a maliciously crafted image could corrupt process memory. Fixed in iOS and iPadOS 26.5.

Security researcher

Cantina competition for Solayer's Solana programs. Rewarded findings.

Security researcher

Cantina security competition for The Garden. Placed 1st out of 230+ researchers after a deep dive into Uniswap V4.

Security researcher

Usual sUSDe private competition on Cantina — my first private competition.

Security researcher

Cantina competition for DAAO. Finished 8th with six submissions.

Warden

Credited on findings in the published Code4rena report for Lambo.win.

Security researcher

Rewarded findings in public competitions including Blast, Citrea, Telcoin, Tensor, Farcaster Attestation, Reserve Protocol, Symbiotic, and RedStone.

Whitehat

When Limit Break's PaymentProcessor V2 was exploited on September 25, 2026, I rescued about 2,000 NFTs from affected wallets and returned them through the nftsaresafu.xyz claim site.

Team Tardigrades

Finals held on-site in Seoul during Korea Blockchain Week.

Team KimchiPremium

Web3 CTF hosted by Hexens.

Team ohiryeojoa

Also placed 3rd in the preliminary round.

Team KimchiPremium

Our team solved every challenge and took six first bloods.

Team ForensicGPT

Team ISEGYE_IDOL

Resident & Judge

Joined the Cantina Fellowship Program as a Resident in January 2025 and started judging competitions the following month.