Asraful Islam Sharthak — Resume | Smart Contract Security & Solidity

Summary

Junior smart-contract security researcher and Solidity developer focused on access control, oracle manipulation, accounting invariants, and hook-based AMM integration. Operates daily in the Foundry + Slither + Aderyn workflow; writes invariants before pattern-matching, then narrows counterexamples to root cause. Ranked 40 / 773 on Cantina's Revert Finance StableSwap Hooks audit with 1 High + 2 Medium valid findings, and actively wardens on Code4rena, Sherlock, HackenProof, Immunefi, and Cyfrin. Open to junior auditor, Solidity developer, and protocol-engineering roles.

Security & Auditing Experience

Cantina — Revert Finance (StableSwap Hooks) Cantina, 2025

Ranked 40 / 773 wardens on a hook-based AMM integration; submitted 1 High and 2 Medium valid findings.
Worked directly off protocol source: wrote invariant properties and Foundry harness before pattern-matching, then narrowed harness failures from counterexample to root cause.

Independent Smart Contract Security Researcher Self-directed, 2024 – Present

Active warden on Cantina, Code4rena, Sherlock, HackenProof, Immunefi, and Cyfrin — writing findings under contest time pressure against hundreds of reviewers.
Reviewed Solidity codebases for reentrancy, access-control flaws, arithmetic, oracle manipulation, and integration defects — the failure modes that actually cause losses on-chain.
Built static + dynamic analysis pipelines (Foundry fuzz & invariant suites, Slither, Aderyn, Mythril, Echidna) and turned their output into short, reproducible reports.

Selected Projects

My-Audit-Portfolio — public audit write-ups GitHub

Public write-ups of full read-throughs on Damn Vulnerable DeFi, Ethernaut, and selected public contest reports — emphasis on reasoning, root cause, and patch diff, not just the answer.

SELF — Audit & Static-Analysis Tooling | Python, Foundry, Slither, Aderyn GitHub

Local CLI orchestrating Foundry tests + Slither + Aderyn behind one config; emits a consolidated Markdown audit report — the workflow I run on every review.

OMNITRIX D-App | Solidity, JavaScript, Foundry GitHub

End-to-end Web3 stack: Solidity contracts + frontend with Foundry tests (incl. fuzz & invariant suites) — built to reason about state transitions and lifecycle, not a tutorial clone.

Technical Skills

Smart Contracts: Solidity, Foundry (forge, cast, anvil, chisel), Hardhat, Remix, OpenZeppelin, ERC-20 / ERC-721 / ERC-1155 / ERC-4626.
Security Tooling: Slither, Aderyn, Mythril, Echidna, Foundry invariant & fuzz suites, manual line-by-line review, reproducible PoCs.
EVM & DeFi Concepts: EVM internals, gas & storage layout, access control, oracle manipulation, hook-based AMMs, stable swaps, lending & CDP invariants.
Web3 Frontend: ethers.js, viem, wagmi, RainbowKit, React, Next.js, TypeScript.
Languages: Solidity, JavaScript, TypeScript, Python, Rust (reading), C/C++ (reading), SQL.
Infrastructure & Workflow: Docker, Git, Linux (incl. WSL2), GitHub Actions CI, IPFS, shell scripting.
Platforms: Cantina, Code4rena, Sherlock, HackenProof, Immunefi, Cyfrin.

Education

B.Sc. in Computer Science & Engineering Dhaka International University, Ongoing (Expected 2027)

Relevant coursework: Distributed Systems, Operating Systems, Computer Networks, Cryptography, Software Engineering.

Higher Secondary Certificate, Science (GPA: 4.50 / 5.00) Notre Dame College Mymensingh, 2022

Community

Executive Committee Member DIU Computer Programming Club (Apr 2026 – Present)

Run technical workshops and mentoring sessions on Solidity, smart-contract security, and CTFs; active in public technical write-ups.

Speaker / Participant ICADHI 2026 (IEEE); FALL FEST 2024