Plakxio Badge Marketplace: Full Audit
NFTFull audit of Plakxio's badge marketplace contracts and deployment scripts on Base, following the Founder Security Sprint. Report in preparation.
Public engagements delivered as Zealynx (founded 2024) and as contractor for partner firms. Click into any report for the full write-up; click into a finding for the citable artifact.
49 audits total · 35 by Zealynx · 13 by Carlos (Bloqarl) as contractor (Cyfrin · Pashov Audit Group · Sherlock · Shieldify · Codespect · Composable Security)
Full audit of Plakxio's badge marketplace contracts and deployment scripts on Base, following the Founder Security Sprint. Report in preparation.
Crosschain epoch-batched stablecoin yield vaults for Contract Level, settled over Chainlink CCIP and CRE. 11 issues identified (1 Critical, 1 High); 8 fixed, 2 mitigated, 1 accepted.
Multi-collateral over-collateralized stablecoin on Arbitrum One, adapted from MakerDAO MCD. Three-week review via Composable Security, in progress.
Gasless ERC-1155 badge marketplace on Base, reviewed in a two-day Founder Security Sprint. 16 issues identified (2 High); 13 fixed, 3 accepted.
Non-custodial strategy vaults for Rain prediction markets on Arbitrum One, via Composable Security. Report in preparation.
Non-custodial escrow and juror-arbitration protocol on Polygon, settled in cNGN. 32 issues identified (1 Critical, 12 High); 29 fixed, 2 mitigated, 1 open.
Backend security review of Pear's Privy-backed vault and agent-wallet signing service for Hyperliquid, via Shieldify. Report in preparation.
Custodial soulbound NFT registry on Polygon for IP-evidence anchoring. Report withheld under client NDA pending publication.
Backend pentest of the Dripster NestJS API, covering auth, business logic, rate limiting, and Polymarket integration. 21 issues identified (1 High, 4 Medium); 13 fixed during the engagement.
Custodial USDC vault opening leveraged Polymarket positions on Polygon. 17 issues identified (2 Medium, no Critical/High); 9 fixed, 8 acknowledged.
BNB ↔ YadaCoin cross-chain bridge with KERI key registry and ERC-2612 permits. 28 issues identified (3 Critical, 2 High); all fixed before mainnet.
TypeScript backend and provably-fair pentest for Fair Casino. 13 issues identified (4 High, 6 Medium, 3 Low), all fixed and verified.