Hey, I'm an expert Solidity, Rust smart contracts & ZK Security Researcher and the creator of ZippelLabs - ZP1, a ZK proving toolstack.
For audit and contract work, please reach out on X or telegram.
Below I have detailed my audit experience, education and articles.
I'm particularly expert in auditing Solidity and Rust:
-
ZKPs ( Identity, DeFi, Payments, Prover Networks, zkVMs, Proof Verification, Coprocessors, ZK Rollups, ZK L1s, Cross Chain, ZKML/AI, ZK TLS, Private Compute, ZK in Bitcoin, Voting, CoSNARKs, Attestation Infrastructure),
-
Privacy (TEEs, MPC, FHE).
Solidity, Rust, Go, Circom, FunC, even Cairo: I find bugs in any language with above given intrestrd projects types (Defi-privacy & ZKPs)!
Ethereum, Solana, even Bitcoin: I find bugs in any stack!
Math, ZK, Cryptography, Solidity, Rust, Privacy, Smart Contracts & DLT.
-
Security researcher
- Private audits since (Q4 2024 - now)
- competitive audits @Code4rena, @Sherlock, @Cantina & @Codehawks since (Q1 2024 - now)
-
Blockchain Developer (Q2 2023 - Q3 2023)
-
Software Developer(AI/Web-dev) (Q2 2021 - Q1 2023)
-
Degrees
- Bachelor's of Technology in Electronics & Communication Engineering
- Bachelor's of Science in Computer Science
Public Profile
- Cantina x Spearbit: https://cantina.xyz/u/thisvishalsingh
- Sherlock: https://audits.sherlock.xyz/watson/thisvishalsingh
- Zk-Circuits-bugs
- ZK Proofs Security Part1 - Zero To One: ZK security can be grouped into four layers
- ZK Proofs Security Part2 — Zero to One: Should you pay for security audits for ZK SNARKs?
- ZK Proofs Security Research - Zero to One: Bug Classes - Assigned but not Constrained-1
- zkSNARKs security
- RadicalxChange - 3rd Rank
: Highest bidder can withdraw his collateral due to a missing check in _cancelAllBids - Sorella Angstrom - 4th Rank(10xCrit-Patrol team) : Fees can be stolen by changing the initialized ticks
- Geneius Contracts - 6th Rank : DoS in Solana vai order_hash collision during filling orders
- Nitro-Labs/Solaxy - 8th Rank : Stale owner index lets attackers create “ghost” programs and exhaust resources
- Napier - 9th Rank : Loss of funds due to not collecting fees
- FarcasterAttestation 16th Rank: The lack of ERC-165 compliance leads to integration failures
| Project | Project review type | Date |
|---|---|---|
| Solayer | Infrastructure - Solana Bridge (Rust) | 2025 |
| Clementine | Infrastructure - zk Bridge on Bitcoin (Rust) | 2025 |
| Citrea | Infrastructure - zkRollup on Bitcoin (Rust) | 2025 |
| Space & Time | Infrastructure - zk (Rust, Solidity) | 2025 |
| Genius Foundation | Infrastructure - Solana Bridge (Rust, typescript, Solidity) | July 2025 |
| Telcoin Network | Infrastructure - EVM L1 (Rust) | June 2025 |
| Succinct | Infrastructure - zk (Solidity) | July 2025 |
| Nitro Labs / solaxy | Infrastructure - Solana VM & rollup (Rust) | June 2025 |
| Alchemix v3 | Smart Contract - Solidity | May 2025 |
| DefiApp | Smart contract - Staking (Solidity) | February 2025 |
| FarcasterAttestation | Smart contract/Infrastructure - Solidity | January 2025 |
| AAve v3.3 | Smart contract - Solidity | January 2025 |
| Daoo | Smart contract - Solidity | January 2025 |
| Chorus One / ton-pool-contracts | Staking contract - TON Blockchain(FunC) | January 2025 |
| Stakeup-Bloom-v2 | Smart contract - LST & Lending (Solidity) | January 2025 |
| Sorella Labs-Angstrom | Smart contract-AMM | November 2024 |
| InfinityPools | Smart contract-AMM | October 2024 |
| Panoptic | Smart contract-AMM | October 2024 |
| Decent - 0ft4626 | Smart contract-Cross Chain | September 2024 |
| Zerolend One | Smart contract-Lending | August 2024 |
| Winnables Raffles | Smart contract-NFT | August 2024 |
| Tadle | Smart contract | August 2024 |
| LoopFi | Smart contract-Lending | July 2024 |
| RadicalxChange | Smart contract | March 2024 |
| Napier | Smart contract | February 2024 |
| Project | Project review type | Date | Review type | Result |
|---|---|---|---|---|
| NDA | Infrastructure-zk-Rust | November 2025 | Private audit | Private(1-H, 3-M, 6-L) |
| Private | Privacy/Dark Pool AMM-Solidity Smart Contract | October 2025 | Private audit | Private(5-H, 5-M, 27-L) |
| Private | Infrastructure-zk-Rust | October 2025 | Private audit | Private(1-C,2-H, 3-M, 11-L) |
| NDA | Payment-Solidity | October 2025 | Private audit | Private(1-M, 9-L) |
| Private | Rust-Cryptography libs(Bls/othes) | September 2025 | Private review | Private review(2-M, 7-L/I) |
| Private | Payment/Privacy-Solana | September 2025 | Private review | Private |
| Private | Infrastructure-Rust ZK verifier | June 2025 | Private review | Private |
| Private | Infrastructure-ZK-Rust | May 2025 | Private review | Private |
| Private | Infrastructure-ZK-Rust | April 2025 | Private audit | Private |
| Project | Type | Date | Link |
|---|---|---|---|
| SuperAudit | Tools-AI Security Agent | October 2025-Now | |
| Anon-pool-hook | Dark Pool CoW - Using UniswpV4, Phala TEEs, SP1+zkVerify, Eigen AVS | September-2025 | |
| Redacted | - | December 2024 | Currently Building the protocol |
| ZK Book | Cryptography | January-M1 & Novemeber-M2 2024 | Rareskills-ZK-book |
| Smart Contract Security | Solidity | February 2024 | Smart-Contract-Security-&-Auditing-Course |
| Smart Contract Development | Solidity | January 2024 | Smart-Contract-Development-Course |
| DeFi & Solidity | Solidity | December 2023 | Solidity |
| Ethereum | Ethereum | 2023 | Mastering Ethereum |