ret2basic.eth Home Portfolio Taichi Audit CTF Writeup

ret2basic.eth

Work Experience

Independent Security Researcher

Jan 2023 – Present

Audit Highlights:

  • yAudit - Fira (Morpho fork, Solidity) - 1 med
  • yAudit - Yield Basis DAO (Curve DAO-like, Solidity) - 1 crit, 1 high, 4 med
  • yAudit - Centrifuge V3 (RWA, Solidity) - 1 high, 1 med
  • yAudit - SecretHippoProject (Resupply integration, Solidity) - 3 high, 4 med
  • Plainshift - MegaEVM (revm fork, Solidity) - 2 high, 6 med
  • Taichi Audit - Isle V2 (Credit card style lending, Solidity) - 3 high, 11 med
  • Plainshift - Echelon (Pendle fork, Aptos Move) - 2 crit, 4 high, 3 med
  • HackenProof - SuiDEX (AMM, Sui Move) - 5th place
  • Code4rena - Cabal Liquid Staking Token (Aptos Move) - 3rd place
  • Movebit - Turbos (Uniswap V3-like AMM, Sui Move) - 7 high
  • Movebit - YuzuDEX (Uniswap V3-like AMM, Aptos Move) - 3 high, 1 med
  • Movebit - Fiva (Pendle Finance-like yield trading, Ton FunC) - 2 med
  • Fuzzland - USD1 on Canton (Stablecoin, Daml) - 1 high, 2 med

Security Engineer Intern

zksecurity

Aug 2024 - Nov 2024
  • Participated in Hinkal audit (Privacy protocol similar to Tornado Cash - Solidity + Circom)
  • Built zkbugs - Wrote PoCs for ~30 historical Circom bugs from audit reports

Security Engineering Intern

Sigma Prime

Jan 2024 - Apr 2024
  • Participated in Taiko and Reth audits, helped with EigenLayer audit
  • Taiko: Ethereum-equivalent ZK rollup protocol. Focused on bridge and SGX proofs, wrote PoCs for all findings
  • Reth: Rust implementation of Ethereum. Focused on ECIES lib, revm, and consensus bugs. Found two notable networking layer findings
  • Helped escalate an ECC attack finding from high to critical in EigenDA audit

Achievements

Web3 CTF Rankings

  • onlyPwner - All challenges solved
  • Magic of Solidity (by jinu) solved on DreamHack
  • Remedy (Hexens) CTF 2025 - 7th place
  • Blaz (Fuzzland) CTF 2024 - 4th place, 2023 - 4th place
  • Ethernaut (OpenZeppelin) CTF 2024 - 9th place
  • Paradigm CTF 2023 - 11th place
  • Numen CTF 2023 - 4th place
  • MetaTrust CTF 2023 - 6th place
  • QuillCTF Dubai 2023 - 5th place
  • QuillCTF MetaToken contest - 3rd place
  • Flashbots MEV-Share CTF 2023 - All challenges solved

Secureum RACEs Rankings

  • RACE #37 - 1st place
  • RACE #42 - 2nd place
  • RACE #20 - 2nd place
  • RACE #27 - 3rd place
  • Participated in several Secureum workshops for outstanding performance

Web2 Security Certifications

  • Offensive Security Certified Professional (OSCP)
  • Certified Red Team Operator (CRTO)
  • Certified Red Team Professional (CRTP)
  • eLearnSecurity Web Application Penetration Tester eXtreme (eWPTX)
  • eLearnSecurity Certified Professional Penetration Tester (eCPPT)
  • eLearnSecurity Certified eXploit Developer (eCXD)
  • eLearnSecurity Enterprise Defense Administrator (eEDA)