Kurt Landman Perth, Australia

Smart contract
security research.

I review DeFi contracts and blockchain systems, and build products for research, trading and developer workflows.

Get an audit estimate View public findings

Top Ranked Immunefi · 77th all time · $5,946 earned 2nd place Firelight · 2 High findings 1 Critical + 1 High Quantus · 8th place 15th of 186 ENS · 23 valid submissions, including duplicates

Selected research

Published findings and the evidence behind them.

All 11 public findings

Featured write-up

Revert Finance

High

StableSwap Hooks

Native ETH removeLiquidity reentrancy lets an LP swap against withdrawn stale reserves

A published case study in AMM accounting and callback safety.

Read the write-up Cantina record

ENS

Critical

Renewal route prices and displays the normalized name but signs the raw label

Quantus

Critical

High-security accounts can be drained immediately via an unbounded tip on a whitelisted call

Firelight

High

Assessment approval can execute a replacement loss schedule the Risk Consortium never reviewed

Work with me

Independent smart
contract audits.

A focused review of your Solidity code, from accounting and access control to the edge cases in your protocol.

A defined scope and commit
A written findings report with evidence and recommended fixes
A review of fixes within the agreed scope

See my published findings

Estimate your review

Project pricing from US$1,500, based on code size and complexity.

Solidity code in scope

Contracts in scope

Count the contracts and custom libraries to review. Exclude blank lines, comments, tests and unchanged third-party source.

Code complexity

Tokens, NFTs, vesting and straightforward permissions.

Estimated project feeUS$3,000

I’ll confirm a fixed project fee after reviewing your repository, dependencies and scope.

Enquire about this audit

Opens your email app with this estimate. hello@tradi3.com

Products & developer tools

Software I build and maintain alongside security research.

Sports research

AskJohnno

Researched sports forecasts delivered privately through Telegram, with every settled result kept on a public record.

Owner & developer

Security research tools

Bounty Operator

A review workflow for bug bounty reports and supporting files, with source citations, evidence checks and model comparisons.

Creator

Trading software

PolyTraderBot

A Polymarket terminal with cost previews and portfolio tracking, alongside a suite of self-hosted trading bots.

Owner & developer

Telegram automation

PolyTortoise

Automated Polymarket copy trading in Telegram, with paper mode and configurable position and loss limits.

Developer

Solana tooling

Svarog Launcher

Solana token-launching and trading software, spanning the application, transaction services and supporting infrastructure.

Lead developer

Developer infrastructure

Switchyard

A Rust gateway for OpenAI, Anthropic and Gemini APIs, with protocol translation, streaming, failover and an operations dashboard.

Open source

More work: RAM Raccoon, Ink & Ivory Artistry, and earlier projects.

Where I focus

The boundaries where assumptions meet real behaviour.

Accounting & invariants: Share math, rounding boundaries, and drift across repeated operations.
AMMs & curve math: Reserve accounting, fee-on-transfer tokens, and behaviour at the bounds.
Oracles & price paths: Staleness, sequencer downtime, and decimal handling.
Access & roles: Role changes, lingering approvals, and missing revoke paths.
Upgrades & lifecycle: Initialisation, storage layout, and what stays live after an incident.
Standards & integration: ERC-20, ERC-2612, and deviations that break interoperability.

Get in touch

Let’s talk about
your code.

Send a repository and scope for an audit, or get in touch about a product or collaboration.

hello@tradi3.com View the audit portfolio