ZKsync Era
1st place
Code4rena
L2 protocol
Selected work
Evidence you can open and inspect.
Contests / findings / CTFs / research
Public records do not replace diligence on a proposed engagement. They do make one thing easier: evaluating how Taichi finds, explains, and reasons about security failures before you share code.
Track record
Repeated signal, not a single logo wall.
Figures below are maintained from the public Taichi portfolio. Follow the linked contest and report records to verify the underlying evidence.
70+
Competitive audits
14
First places
24
Top 3 finishes
170+
H/M findings
ContestResultPlatformFocusSource
Maia DAO Ecosystem
1st place
Code4rena
DeFi system
Arbitrum BoLD
1st place
Code4rena
Dispute protocol
Arcade.xyz
1st place
Cantina
Protocol review
Coinbase SpendPermission
1st place
Cantina
Account abstraction
OneWorld
1st place
CodeHawks
Smart contracts
Public portfolio data · verified Jul 2026
Contest platforms may display the member handle used for a submission; the Taichi portfolio records the corresponding group result.
How to read the evidence
Different signals answer different questions.
01
Contest placements
Measure repeated performance under open competition, independent judging, and fixed review windows.
02
Public findings
Let engineering teams inspect issue framing, impact reasoning, affected paths, and technical specificity.
03
CTF performance
Keeps exploit construction, debugging, and adversarial execution active—not only vulnerability classification.
04
Source-level research
Shows how the team models unfamiliar systems before a commercial conversation begins.
Selected finding records
Open the finding records, not just the totals.
Maia DAO
Portfolio: 14 High · 6 Medium
Portfolio-recorded findings across a broad DeFi ecosystem review.
Tapioca
Portfolio: 5 High · 6 Medium
Taichi portfolio record covering multiple high-impact protocol paths.
AI Arena
Portfolio: 5 High · 3 Medium
Taichi portfolio finding record from the Code4rena review.
Salty.IO
Portfolio: 1 High · 7 Medium
Taichi portfolio record showing depth beyond a single headline issue.
Research as diligence
See the reasoning before the engagement.
Long-form work exposes how the team learns a system, traces state, tests assumptions, and communicates technical risk.
01Protocol internalsMorpho: markets, rates, oracles, vaults, and integration riskA five-part source walkthrough from Morpho Blue primitives to MetaMorpho integration assumptions.02Runtime securitySolana attack surfaces, traced through codeA four-part series on account creation, Anchor initialization, stale CPI state, and Token2022 behavior.03Incident reconstructionThe Solv callback path behind a $2.7M exploitA source-to-exploit reconstruction of the accounting path that allowed one deposit to produce two mints.
Your system is the next evidence