Architecting
On-Chain Systems.
I am Harsh. I design decentralized lending markets, automated yield systems, and perform smart contract security audits to protect protocol capital on-chain.
Protocol Overview
I am the Founding Smart Contract Engineer at ONES, an on-chain neobank, and an active Smart Contract Security Auditor. I build and audit the core smart contracts that power on-chain financial infrastructure, from peer-to-peer lending markets with dual price and time-based liquidations to automated yield-on-spend treasury routers.
With an adversarial zero-trust background rooted in cybersecurity and bug hunting, I design and audit systems through an attacker's lens. Having written and verified 21+ smart contracts covering lending protocols, ERC-4626 vaults, and account abstraction, I focus relentlessly on invariant testing, gas efficiency, and non-custodial safety.
Production Protocols
Core financial protocols architected and shipped for ONES on-chain neobank.
P2P Lending & Borrowing
A decentralized lending protocol built for ONES neobank. Borrowers can access instant loans against their crypto collateral, while lenders earn interest. Protects capital through automatic liquidations if collateral prices drop or if the loan duration expires, with 100% gasless transactions for users.
Idle Balance Yield Router
An automated treasury engine that puts users' idle account balances to work. Funds are automatically routed into audited DeFi pools to continuously earn yield in the background, and instantly unwrapped whenever the user makes a card purchase or withdraws cash, with zero manual steps.
Contract Lab
Standalone protocols and financial logic engineered from first principles without external frameworks.
Token Vesting Contract
Production-ready ERC20 token vesting system with per-beneficiary cliff periods and linear unlock. Built from scratch with NatSpec documentation, events on every action, and verified with comprehensive Foundry test suites.
NFT Dutch Auction
Single contract combining ERC721 NFT minting with a declining price auction. First buyer gets the NFT minted directly to their wallet. Excess funds auto-refunded with verified settlement logic.
Decentralized Lottery
Trustless lottery using commit-reveal scheme for fair randomness without external oracles. Players commit a hash, reveal their number, and highest wins 90% of the pot with trustless payout mechanics.
OnChain Reputation System
A smart contract system where users can register and earn reputation points on-chain. The contract tracks activity and assigns reputation tiers based on accumulated points. Built to deeply understand user state management, mappings, structs, and frontend integration.
Escrow Contract
A decentralized escrow allowing two parties to securely transact. Funds are locked until both sides complete the deal flow. Taught me financial state machines and secure native value transfers.
Advanced Vault
A time-locked vault contract where users can deposit funds and withdraw only after a specific lock period. Focuses intensely on time-based restrictions, safe withdrawal patterns, and contract balance management.
ERC20 Implementation
A custom implementation of the ERC20 standard built from scratch. Includes transfer, approvals, allowance tracking, minting, and burning mechanics.
Yield Staking Contract
A complex staking contract where users deposit assets and earn rewards over time. The system meticulously tracks user stake, reward accumulation, and allows users to claim rewards or unstake.
Security & Engineering Stack
Active smart contract security auditor and protocol engineer specializing in invariant testing, defensive DeFi architectures, and EVM exploit mitigation across production smart contracts.
Cross-function & read-only reentrancy, price oracle manipulation & staleness, precision loss / rounding drift, access control bypass, and proxy storage layout collisions.
Foundry invariant test suites, Echidna fuzzing, Slither static analysis, mainnet state forking, and NatSpec-driven property testing.
Formal specification of state invariants before deployment. Code is treated as inherently hostile until all invariant fuzz runs pass 100k+ iterations without reversion.
Protocol Architecture
- P2P & Pool Lending Markets
- Dual-Axis (Price & Time) Liquidations
- Yield-on-Spend & ERC-4626 Routers
- JIT Liquidity Buffer Balancing
- ERC-4337 Account Abstraction & Paymasters
- Upgradeable Proxies (UUPS & Transparent)
Security & Invariants
- Reentrancy Guards & CEI Patterns
- Storage Layout & Collision Prevention
- Slither Static Analysis & Fuzzing
- Gas Optimization & Slot Packing
- Oracle Price Feeds & Staleness Checks
- Zero-Trust Financial State Machines
Tooling & Active R&D
- Foundry & Hardhat (Testing & Forking)
- Solidity 0.8+ & Yul Assembly
- Viem / Ethers.js / Web3.js
- EVM Ecosystem & Layer 2 Protocols
- Smart Contract Security Auditing
- Formal Verification & Invariant Testing
Operational Trajectory
Founding Smart Contract Engineer & Auditor
Spearheading core smart contract architecture at ONES (on-chain neobank) while conducting independent security audits for DeFi protocols. Specializing in invariant fuzzing, CEI verification, and economic attack surface analysis:
- P2P Lending & Borrowing Protocol: Dual price and time-based liquidation mechanics
- Yield-on-Spend Treasury Router: Automated idle balance yield and instant buffer unwrapping
- Account Abstraction with ZeroDev Kernel for a 100% gasless user experience
Solo Protocol Engineer
Built 21 production-level Solidity contracts from scratch covering ERC20, ERC721, AMMs, lending protocols, flash loans, proxy patterns, and DeFi primitives. Deployed three portfolio protocols with verified test suites.
Full-Stack Engineering Intern
Engineered full-stack applications and integrated complex systems using React.js. Focused on bridging robust frontend interfaces with secure, scalable backend architectures.
White Hat Bug Hunter
Operated as an independent security researcher before transitioning fully into Web3 in 2025. Hunted vulnerabilities and audited system architectures across numerous Web2 FinTech applications, building a foundational mindset for zero-trust engineering.
B.E. Information Technology
SAL Engineering and Technical Institute. Maintained an 8.05 CGPA while aggressively pivoting theoretical computer science fundamentals into practical Web3 and cryptography applications. Currently building toward smart contract security auditing and contributing to open-source DeFi protocols.
Ready to
Contribute.
Available for founding smart contract engineering roles, protocol architecture, and smart contract security audit engagements.