About Me

👋 Hey, I’m Joran Honig.

I’m an independent security researcher working with Spearbit (LSR), Immunefi (elite whitehat) and others keeping smart contracts safe. Previously I was part of the all star team Consensys Diligence focusing on fuzzing and vulnerability detection automation. I like to specialise in crazy bugs.

About this site

This website is structured as a digital garden, think of it as a personal wiki that I continuously extend and maintain over time. Different from a blog, the articles will grow and improve over time.

The content on this site includes a wide range of topics but mostly has to. do with security.

That said, I still have some blog like content, and all my old blog posts are still here: blog.

Entry Points

The internet is full of courses, blog posts and guides. I’ve written some “quests” which provide managable chunks of curated content to help you dive into a new topic.

There is only one path for now: Path - The Ultimate Guide to DeFi Hacking

Projects

I’m continuously building tools and experimenting, here is a list of some of the projects I’m working on/ have worked on:

Libraries:

Tools:

  • vertigo - mutation testing for solidity
  • napalm - an “IDE” for developing detection modules
  • mythril - a symbolic execution security analysis tool for EVM smart contracts