tradi3_ Kurt Landman
Request an audit

Kurt Landman Perth, Australia

Smart contract
security research.

I review DeFi contracts and blockchain systems, and build products for research, trading and developer workflows.

Request an audit Explore 11 public write-ups
Immunefi all-time
#77Top Ranked
28 accepted reports · $5,946 earned
Firelight Audit Comp
2ndof 133
2 High findings · collateral & consortium logic
Quantus Audit Comp
8thof 65
1 Critical, 1 High · Substrate runtime & POS
ENS Audit Comp
17Criticals
15th of 186 · 1 Chief, 22 duplicates, 1 Insight

Selected research

All 11 public findings
Critical T3-011

ENS

Audit Competition | ENS

Renewal route prices and displays the normalized name but signs the raw label

The ENS renewal route derives displayed ownership, expiry, and pricing from the ENSIP-15 normalized name while encoding the unnormalized URL label into renew(), letting a crafted link with an invisible character renew a lookalike name using the victim's funds.

Immunefiname normalization / transaction integrity

Read write-up
Immunefi report Contest PDF
Critical T3-007

Quantus

Audit Comp | Quantus

High-security accounts can be drained immediately via an unbounded tip on a whitelisted call

ReversibleTransactionExtension validates only the extrinsic call against the high-security whitelist and never inspects the transaction tip, allowing a signed whitelisted cancel() with an unbounded tip to drain the account's free balance at pre-dispatch.

Immunefitransaction fees / account policy

Read write-up
Immunefi report Contest PDF
High T3-010

Firelight

Audit Comp | Firelight

Assessment approval can execute a replacement loss schedule the Risk Consortium never reviewed

IncidentManager.approveCurrentAssessment(incidentId) binds only the incident ID in calldata and resolves currentAssessmentRoundId from mutable storage at execution, allowing a cancelled and replaced loss schedule to execute under the Risk Consortium's prior signature.

Immunefiapproval binding / access control

Read write-up
Immunefi report PoC source

Products & developer tools

All projects

Sports research

askjohnno.com

AskJohnno

Researched sports forecasts delivered privately through Telegram, with every settled result and official source kept on a public record.

Owner & developer Public record

Security research tools

bountyoperator.com

Bounty Operator

Pre-submission review for bug bounty reports and smart contract findings, with file-and-line citations, prior-art checks, MCP agent tools and the Paydirt model benchmark.

Creator GitHub source

Trading software

polytraderbot.com

PolyTraderBot

A non-custodial Polymarket terminal with full pre-trade cost previews and verified P&L cards, alongside six self-hosted trading bots.

Owner & developer Open terminal

Telegram automation

polytortoise.com

PolyTortoise

Automated Polymarket copy trading in Telegram, with free paper mode, exit mirroring, and configurable position and loss limits.

Developer

Solana tooling

svaroglauncher.com

Svarog Launcher

Solana token-launching, bundling and trading software for Pump.fun and Raydium, spanning the application, transaction services and practice trading zone.

Lead developer svroglauncher.com

Coding workspace & API gateway

switchya.com

Switchya & Switchyard

A local coding workspace and CLI for Codex, Claude Code, Antigravity and API models, paired with a standalone Rust gateway for OpenAI, Anthropic and Gemini protocols.

Creator · Open source GitHub source

More work: RAM Raccoon, Ink & Ivory Artistry, and earlier projects.

Independent smart
contract audits.

A focused review of your codebase against real adversarial paths, from accounting invariants and oracle boundaries to state transitions and access control.

  • Pinned commit scope with line-by-line manual review and stateful Foundry fuzzing
  • Written findings report with runnable PoC tests and concrete remediation diffs
  • Fix verification on your patched branch before deployment
[email protected]

Send your repository link, commit hash, contracts in scope, and target timeline.

Systems & surfaces reviewed

  1. EVM
    DeFi protocols, vaults & hooks

    Solidity share math, ERC-4626 period accounting, Uniswap v4 hooks, AMM curve bounds, lending liquidations, and Pyth/Chainlink oracle normalization.

  2. L1/L2
    Substrate runtimes, Solana & ZK verifiers

    Rust FRAME pallets, transaction extensions, fee/weight metering, OP-Stack dispute proof intervals, and Solana token/launch programs.

  3. W&A
    Wallets, signing flows & indexers

    ENSIP-15 normalization splits, EIP-712 / ERC-1271 smart-account execution binding, SCALE call decoders, and mempool payment confirmation latches.