Asraful Islam Sharthak — Resume | Smart Contract Security & Solidity

Summary

Blockchain security and development engineer, full-stack developer, and researcher based in Dhaka, Bangladesh. Focused on smart-contract auditing, Solidity development, production web applications, and applied technical research. I use a practical workflow that combines manual protocol review, Foundry testing, and static analysis. Open to blockchain security, smart-contract auditing, full-stack development, and research roles.

Security & Auditing Experience

Independent Smart Contract Security Researcher Self-directed, 2024 – Present

Active across Code4rena, Sherlock, HackenProof, Immunefi, and Cyfrin, with a focus on careful protocol review and reproducible security research.
Reviewed Solidity codebases for reentrancy, access-control flaws, arithmetic, oracle manipulation, and integration defects — the failure modes that actually cause losses on-chain.
Built static + dynamic analysis pipelines (Foundry fuzz & invariant suites, Slither, Aderyn, Mythril, Echidna) and turned their output into short, reproducible reports.

Selected Projects

ScreenKit | native Android capture & automation GitHub

Native Android creator studio and screen-automation suite built with Kotlin, Jetpack Compose, CameraX, MediaProjection, and modern Android architecture.

My-Audit-Portfolio — public audit write-ups GitHub

Public write-ups of full read-throughs on Damn Vulnerable DeFi, Ethernaut, and selected public contest reports — emphasis on reasoning, root cause, and patch diff, not just the answer.

SELF — Audit & Static-Analysis Tooling | Python, Foundry, Slither, Aderyn GitHub

Local CLI orchestrating Foundry tests + Slither + Aderyn behind one config; emits a consolidated Markdown audit report — the workflow I run on every review.

OMNITRIX D-App | Solidity, JavaScript, Foundry GitHub

End-to-end Web3 stack: Solidity contracts + frontend with Foundry tests (incl. fuzz & invariant suites) — built to reason about state transitions and lifecycle, not a tutorial clone.

Technical Skills

Smart Contracts: Solidity, Foundry (forge, cast, anvil, chisel), Hardhat, Remix, OpenZeppelin, ERC-20 / ERC-721 / ERC-1155 / ERC-4626.
Security Tooling: Slither, Aderyn, Mythril, Echidna, Foundry invariant & fuzz suites, manual line-by-line review, reproducible PoCs.
EVM & DeFi Concepts: EVM internals, gas & storage layout, access control, oracle manipulation, hook-based AMMs, stable swaps, lending & CDP invariants.
Web & Full-Stack: TypeScript, JavaScript, React, Next.js, Node.js, Python, REST APIs, PostgreSQL, MongoDB, ethers.js, viem, wagmi, RainbowKit.
Languages: Solidity, JavaScript, TypeScript, Python, Rust (reading), C/C++ (reading), SQL.
Infrastructure & Workflow: Docker, Git, Linux (incl. WSL2), GitHub Actions CI, IPFS, shell scripting, deployment pipelines.
Research: Technical writing, literature review, vulnerability analysis, data analysis, audit reporting.
Platforms: Code4rena, Sherlock, HackenProof, Immunefi, Cyfrin.

Education

B.Sc. in Computer Science & Engineering Dhaka International University, Ongoing (Expected 2027)

Relevant coursework: Distributed Systems, Operating Systems, Computer Networks, Cryptography, Software Engineering.

Higher Secondary Certificate, Science (GPA: 4.50 / 5.00) Notre Dame College Mymensingh, 2022

Community

Programme Manager DIU Computer Programming Club (Apr 2026 – Present)

Run technical workshops and mentoring sessions on Solidity, smart-contract security, and CTFs; active in public technical write-ups.

Speaker / Participant ICADHI 2026 (IEEE); FALL FEST 2024