securing & building safe ecosystems

hey, i'm Isah.

Security Engineer

Certified in appsec, network defense and threat intelligence. I hunt vulnerabilities across both Web3 and Web2 surfaces, then turn findings into clear reports, proof-of-concepts and fixes.

hire megrab my cv
find me
Isah Dauda
human-audited
web3 native
smart contract auditspenetration testingsoliditysoroban / stellarthreat intelligencefull-stack web3defi securityzero-knowledgesmart contract auditspenetration testingsoliditysoroban / stellarthreat intelligencefull-stack web3defi securityzero-knowledge
about me

nice to meet you.

Security nerd with a builder's heart. Here's the quick tour — each card stacks up as you scroll.

01the short version01/07

I'm a security researcher and blockchain developer who lives across smart contract auditing, web application penetration testing, and DeFi protocol development. My reps come from competitive audit contests, bug bounty programmes, and shipping production Web3 protocols of my own.

A full-stack blockchain engineering background means I audit from the inside out, tracing vulnerabilities through architecture and business logic instead of just running scans. Comfortable on Web3 and Web2 attack surfaces alike, and every engagement ends with written reports, proof-of-concept scripts, and remediation guidance.

02my toolbox02/07
Security & Auditing12 tools
Web App Penetration TestingAPI Security TestingSmart Contract AuditingBug Bounty HuntingThreat IntelligenceSocial Engineering AwarenessWireless Intrusion DetectionAdversarial AI Red TeamingActive Directory EnumerationPrivilege EscalationReconnaissance & Threat ModelingResponsible Disclosure & Reporting
Blockchain & Web313 tools
SolidityCircom (ZK Circuits)FHE via CoFHE / FhenixHardhatFoundryERC-20 / ERC-2771 / ERC-4337Zero Knowledge ProofsDelegatecall Vulnerability AnalysisFlash Loan Attack VectorsOracle ManipulationReentrancy & Access Control Auditingethers.js / Web3.jsVulnerability Detection & Analysis
Programming11 tools
PythonTypeScriptSolidityBash ScriptingRust (familiar)React / Next.jsViteNode.js / FastifyScapySupabase / PostgreSQLDocker
03the deep cuts03/07
Pentest Arsenal
Burp SuiteMetasploitNessusSQLMapNiktoGobusterHydraJohn the RipperNetcatImpacketCertipyBloodyADnxc
Smart Contract Tools
SlitherMythrilGlider (r.xyz)Foundry Fuzz TestingEchidnaManticoreAderyn4naly3er
Network & Traffic
WiresharkNmapAircrack-ngKismetTcpdumpNetdiscover
OSINT & Threat Intel
MaltegoShodantheHarvesterRecon-ngMISPOpenCTI
Digital Forensics
AutopsyVolatilityBinwalkExifToolRecuva
OS Environments
Kali LinuxParrot OSUbuntuWindows ServerWindows 7-11WSL2VirtualBox / VMware
Soft Skills
Team CollaborationCommunicationReport Writing
04school & community04/07

B.Tech in Cyber Security Science

Federal University of Technology, Minna · 2021 to 2026

community

Web3Bridge Cohort XIII: Completed the structured Web3 development and security programme and contributed to open source Bloceducare repositories on GitHub.

Build Wave (drips): Open source contributor under @trinnode on Stellar and Soroban TypeScript SDK repositories.

05badges collected05/07

Certified AppSec Practitioner (CAP)

The SecOps Group · April 2025

Certified Network Security Practitioner (CNSP)

The SecOps Group · April 2025

HCIA - Cloud Service V3.0

Huawei Talent Online · April 2025

Certified Cyber Security Analyst (CS3A)

CyberWarFare Labs · September 2023

Certified Cyber Threat Intelligence Analyst (CTI 101)

Udemy · June 2023

Practical Ethical Hacking

TCM Security · February 2024

Linux Privilege Escalation

TCM Security · March 2024

MasterCard - Cyber Security Job Simulation

Forage · December 2023

06where i've worked06/07

Student Intern, Web3 Security and Development Track

Web3Bridge

Jul. 2025 – Oct. 2025

Contributed to open-source repositories under the Bloceducare organisation on GitHub.

Digital Forensic Investigation

Aug. 2024

Conducted a forensic investigation on a disk image obtained from a simulated crime scene, using Autopsy to analyse artefacts and generate findings report.

Volunteer

Southern Kaduna IT Professional Network

Oct. 2024

Provided first level technical support, resolving 30+ software issues at a community event.

Volunteer

Cybersecurity Education Initiative (CYSED)

Oct. 2023

Collaborated on cyber awareness sessions across three secondary schools, educating 500+ students on phishing and social engineering risks, and supported a wider public cybersecurity awareness campaign in Minna.

Cybersecurity and Ethical Hacking Intern (Remote)

Cyber and Forensics Security Solutions (CFSS)

Nov. 2023 – Dec. 2023

Completed an internship in penetration testing methodology, information gathering and vulnerability mitigation on live digital infrastructure.

07bug bounty field notes07/07

Active bug bounty hunter across three platforms, covering both Web2 and Web3 targets.

Cantina: Smart contract and DeFi protocol security reviews.

YesWeHack: Web application and API security testing across varied programme scopes.

Bugcrowd: Web application and API security testing across varied programme scopes and industries.

All platform work involves manual vulnerability research, responsible disclosure and impact-focused report writing for programme owners.

portfolio

stuff i've built & broken

Web apps, smart contract audits, on-chain protocols and the occasional security gadget.

selected work

the headliners

scroll to slide

01 / 03
how i work

an engagement, in four moves.

01

Recon before contact.

Every engagement opens with mapping the attack surface: architecture review, trust boundaries, threat modelling, and the assumptions the team is making without realizing it.

02

Read the code like an attacker.

Manual review first, tooling second. I trace value flows, access control and business logic through the codebase, hunting the paths automated scanners are built to miss.

03

Prove it, not just point at it.

Each finding gets a working proof-of-concept and a severity rating you can defend, so the fix is a decision, not a debate.

04

Report, retest, close the loop.

You get a written report with reproduction steps, impact analysis and remediation guidance — then a retest to confirm every finding is actually dead.

open source

things i've shipped

SDKs, protocols and security tools, straight from my GitHub.

say hello

let's build something safe.

Got an audit, a wild idea, or a protocol that needs a health check? My inbox is open.

email me

koinated@gmail.com

contact me

+234 810 380 0607

tap to chat on whatsapp →

privacy first

PGP key available on request. Signal and ProtonMail welcome for the extra-secret stuff. No trackers, no cookies, only secured ecosystems. Pinky promise.