Audit Portfolio
ABA
Founder and Principal Security Researcher at Cyba Blockchain Security, with 10+ years of combined Web2 and Web3 security expertise.
Audited smart contracts securing over $1B TVL, with 1000+ findings across 51 private and collaborative engagements*.
Former Security Researcher & Team Lead at Bitdefender's Cyber Threat Intelligence Lab.
Collaborated with top-tier security teams including Guardian Audits (EVM) and Clarity Alliance (Stacks, Bitcoin L2).
Ranked 🥇 1st in multiple audit contests; consistent top-10 finisher**..
Socials:
- Telegram: abarbatei
- Twitter (X): abarbatei
- Blog: abarbatei.xyz
Testimonials

Security Engagements
Security Engagements done in 2025 (25)
| Date | Project | Audited Functionality | Organization | Ecosystem & Tech | Report |
Dec | Zest V2 | Borrowing and lending (further upgrades) | Clarity Alliance | ||
Dec | Granite | Miscellaneous improvements | Clarity Alliance | ||
Nov | Bitflow | HODLMM (upgrades) | Clarity Alliance | ||
Dec | Zest V2 | Borrowing and lending (upgrades) | Clarity Alliance | ||
Oct | Hermetica | hBTC yield protocol | Clarity Alliance | ||
Oct | Zest V2 | Borrowing and lending | Clarity Alliance | ||
Sep | Bitflow | HODLMM | Clarity Alliance | ||
Sep | Hermetica | USDh upgrade and security enhancements | Clarity Alliance | ||
Aug | Granite | Pyth oracle client upgrade | Clarity Alliance | ||
Jul | Stacks Foundation | SIP-31 boot contract | Clarity Alliance | ||
Jun | Liquify Ventures | Referral manager component upgrade | Independent | ||
May | Liquify Ventures | Borrowing and lending protocol | Independent | ||
May | Huego | On-chain turn-based strategic block placing game | ChainThreat | ||
May | Granite | Timelock, flash-loan and daily caps integration | Clarity Alliance | ||
May | StackingDAO | sBTC reward transfer logic changes | Clarity Alliance | ||
May | Liquify Ventures | Deposit and claim component | Independent | ||
Apr | ALEX Lab | Discrete Automated Market Maker (DAMM) swap | Clarity Alliance | ||
Apr | Bitflow StableSwap | Unbalanced liquidity withdrawals extension | Clarity Alliance | ||
Mar | iLayer | LayerZero integration for an intent-based orderbook | Independent | ||
Mar | Hermetica | USDh minting contract | Clarity Alliance | ||
Mar | Bitflow Flex Pools | Stableswap algorithm extension | Clarity Alliance | ||
Feb | Accountable | ERC7540 vault implementation | Independent | ||
Jan | Axelar | Cross-chain bridge | Clarity Alliance | ||
Jan | iLayer | Cross-chain, intent-based orderbook | Independent | ||
Jan | Inferno.fun | Bonding curve token launchpad | Independent |
Security Engagements done in 2024 (22)
| Date | Project | Audited Functionality | Organization | Ecosystem & Tech | Report |
Dec | Granite | On-chain price oracle integration | Clarity Alliance | ||
Dec | sBTC Reward Program | Staking contract | Clarity Alliance | ||
Dec | sBTC | Bitcoin bridging mechanism | Clarity Alliance | ||
Dec | Pyth Oracle | On-chain price oracle implementation | Clarity Alliance | ||
Nov | Zest Protocol E-Mode | Extension on a borrowing and lending protocol | Clarity Alliance | ||
Oct | Undisclosed | Bitcoin backed stablecoin | Undisclosed | ||
Sep | Bitflow StableSwap Staking | StableSwap LP staking mechanism | Clarity Alliance | ||
Sep | Bitflow StableSwap | Extension to the existing StableSwap implementation | Clarity Alliance | ||
Sep | Zest Protocol BTCz | Bitcoin to Stacks BTC bridge | Clarity Alliance | ||
Aug | Granite Safety Module | AAVE-like Umbrella Safety Module | Independent | ||
Aug | Stacks Nakamoto Upgrade | Node infrastructure software | Clarity Alliance | ||
Jul | BlastTheBalloon | Extension on my previous BTB audit | sub7 | ||
Jun | Granite | Borrowing and lending protocol | Independent | ||
Jun | Pontis Bridge | Bitcoin asset bridge | Clarity Alliance | ||
May | BlastTheBalloon | Blast on-chain lottery game | sub7 | ||
May | b0rder1ess | Extension on my previous NAP audit | Independent | ||
May | DN404 | ERC7631 standard co-joined ERC20 and ERC721 implementation | Guardian | ||
Apr | Undisclosed | GMX V2 backed stablecoin | Guardian | ||
Mar | Undisclosed | Staking and token migration | Guardian | ||
Mar | Undisclosed | GMX V1 backed stablecoin | Guardian | ||
Feb | b0rder1ess | NFTs backed by Uniswap V2 liquidity | Independent | ||
Jan | Rest Finance | Liquid Restaking EigenLayer Integration | Guardian |
Security Engagements done in 2023 (4)
| Date | Project | Audited Functionality | Organization | Ecosystem & Tech | Report |
Dec | Ithil | Borrowing, lending and options logic; GMX V1, AAVE, Fraxlend and Angle integration | Independent | ||
Dec | Umami | GMX V2 market index: GMI | Guardian | ||
Nov | Dolomite | GMX V2 integration; borrowing and lending GM | Guardian | ||
Oct | PariFi | Perpetuals logic | Guardian |
Public Audit Competitions done in 2023
| Date | Contest | Platform | Rank | Official Report | My findings |
Oct | Brahma | Code4rena | 🥇 1st out of 51 | Link | 1M |
Jul | Beedle - Oracle free perpetual lending | CodeHawks | 7th out of 276 | Link | 5H 2M |
May | Maia DAO Ecosystem | Code4rena | 6th out of 101 | Link | 2H 4M |
May | Juicebox Buyback Delegate | Code4rena | 🥇 1st out of 72 | Link | 1M |
Apr | EigenLayer | Code4rena | 18th out of 43 | Link | 1M |
Apr | ENS | Code4rena | 21th out of 59 | Link | Lows |
Mar | Neo Tokyo | Code4rena | 5th out of 123 | Link | 2H |
Feb | OlympusDAO: Single Sided Liquidity Vaults | Sherlock | 11th out of 154 | Link | 3H 1M |
Feb | Fair Funding by Alchemix & Unstoppable | Sherlock | 5th out of 107 | Link | 3M |
Jan | OpenSea Seaport 1.2 | Code4rena | 6th out of 23 | Link | Lows |
Other Public Audit Contests
| Date | Contest | Platform | Rank | Official Solution |
Jun 2025 | Race 42 | Secureum | 11th out of 49 | Link |
May 2025 | Race 41 | Secureum | 9th out of 50 | Link |
Feb 2025 | Race 38 | Secureum | 23th out of 47 | Link |
Jan 2025 | Race 37 | Secureum | 4th out of 51 | Link |
Nov 2024 | Race 35 | Secureum | 24th out of 91 | Link |
Sep 2024 | Race 33 | Secureum | 16th out of 72 | Link |
Aug 2024 | Race 32 | Secureum | 25th out of 69 | Link |
Jul 2024 | Race 31 | Secureum | 8th out of 83 | Link |
Feb 2024 | Race 27 | Secureum | 25th out of 140 | Link |
Oct 2023 | Race 22 | Secureum | 13th out of 175 | Link |
Mar 2023 | Race 16 | Secureum | 16th out of 205 | Link |
Educational content
- Labubu: Toy Story Gone Wrong
- Stack Too Deep And Indexed Event Logs
- Weird ERC721 Tokens
- DN404 - Vulnerabilities Reported And Resolved
- Blockchain reorgs for Managers and Auditors