CV
GodwinXbt
GodwinXbt
Security researcher · Protocol researcher · Engineer
Independent, deployment-aware security research on live financial protocols. Source to deployment. Economic analysis. Executable PoCs. Falsification when the path does not pay. Findings are disclosed and published.
Proof
17 documented findings · 11 protocols · Ethereum, Base, BSC, Robinhood Chain
3 Critical · 6 High · 7 Medium · 1 Informational
Security engagements
Independent research on deployed contracts. Not a retained audit roster. Type is the engagement model. Disclosure is public writeup after responsible handling.
| Protocol | Chain | Type | Findings | Disclosure |
|---|---|---|---|---|
| lemon.fun | Robinhood Chain | Independent | 1 Critical | Responsible disclosure · public writeup |
| Noon (USN) | Ethereum | Independent | 2 Critical | Responsible disclosure · public writeup |
| Flex Finance | Ethereum | Independent | 2 High | Responsible disclosure · public writeup |
| Hydrex | Ethereum | Independent | 1 High | Responsible disclosure · public writeup |
| Ripe Protocol | Base | Independent | 1 High | Responsible disclosure · public writeup |
| Orvex | Robinhood Chain | Independent | 2 High · 3 Medium | Responsible disclosure · public writeup |
| Ellipsis Finance | BSC | Independent | 1 Medium | Responsible disclosure · public writeup |
| HyperFX | Ethereum | Independent | 1 Medium | Responsible disclosure · public writeup |
| Monolith Market | Ethereum | Independent | 1 Medium | Responsible disclosure · public writeup |
| Panoptic V2 | Ethereum | Independent | 1 Medium | Responsible disclosure · public writeup |
| Ramses DLMM | Robinhood Chain | Independent | 1 Informational | Responsible disclosure · public writeup |
Selected investigations
- lemon.fun · Critical
Robinhood Chain. Legacy bonding curve. Total buyer-fund theft.
- Noon · Critical
Ethereum. Unratiod redeem and uncollateralized self-mint.
- Flex · High
Ethereum. Auction self-deal on lender and borrower paths.
- Hydrex · High
Ethereum. One-time initializer guard never latches.
- Orvex · High
Robinhood Chain. Stale reward index and a missing token burn path.
- Ripe · High
Base. No L2 sequencer uptime check on Chainlink prices.
Method
- Source-to-deployment verification on live contracts
- Economic analysis before severity is assigned
- Executable Foundry PoCs against forked mainnet state
- Falsification when the path does not pay
- Responsible disclosure, then a public writeup
Engineering used in the research
Ragnarok — adversarial research harness. Themis — runtime invariant monitoring. Solidity, Foundry, TypeScript, Ethereum / Base / BSC / Solana.