Skip to content
View soloking1412's full-sized avatar
🏠
Freelancer
🏠
Freelancer

Block or report soloking1412

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
soloking1412/README.md

Maheswaran Velmurugan

Full Stack · Backend · Blockchain · Smart Contract Developer

Building production infrastructure across 8+ chains — solo, grant-funded, shipped.

TwitterTelegramNPMSherlockPBA


About

Full stack and blockchain developer with a focus on developer tooling, DeFi protocol engineering, and smart contract security. I build end-to-end — TypeScript CLI tools, Python SDKs, React frontends, Solidity/Clarity/Rust smart contracts, and backend indexers — and I ship independently without a team.

Grant recipient from the Arbitrum Foundation and the Stacks Foundation. Active security researcher with 20+ confirmed High/Medium findings across Sherlock, Code4rena, Cantina, and Immunefi. Polkadot Technical Fellowship candidate and Polkadot Blockchain Academy graduate, with open-source contributions to paritytech/polkadot-sdk. I audit the same protocols I know how to build, which means I find what others miss.

Languages: TypeScript · Python · Solidity · Rust · Clarity · Cairo · Move · JavaScript
Frameworks: Node.js · React · Next.js · Hardhat · Foundry · Anchor · web3.py · viem
Chains: Ethereum · Arbitrum · Solana · Stacks · Rootstock · Polkadot · Starknet · BNB · Aptos


Featured Projects

Stylus-Toolkitnpm install -g stylus-toolkit

CLI development environment for Arbitrum Stylus (Rust) smart contracts. Think Hardhat, but for Stylus.

Arbitrum grant-approved. Shipped both milestones. npm downloadsstars

stylus-toolkit init --name my-token --template erc20
stylus-toolkit build
stylus-toolkit profile
┌──────────────────────┬──────────────┬──────────────┬────────────┬────────┐
│ Function │ Rust (Stylus)│ Solidity │ Savings │ % │
├──────────────────────┼──────────────┼──────────────┼────────────┼────────┤
│ read │ 5,000 │ 6,000 │ 1,000 │ 16.67% │
│ write │ 12,000 │ 20,000 │ 8,000 │ 40.00% │
│ compute │ 8,000 │ 15,000 │ 7,000 │ 46.67% │
│ oracle │ 75,000 │ 103,000 │ 28,000 │ 27.18% │
│ Avg per-call │ - │ - │ - │ 32.6% │
└──────────────────────┴──────────────┴──────────────┴────────────┴────────┘
✅ 32.6% average gas savings proven · 26%+ full TCO savings

What it does:init with 4 templates (basic, ERC20, ERC721, DeFi) · build to WASM · profile for side-by-side Rust vs Solidity gas benchmarks · dashboard analytics web UI · dev one-command Docker testnet · deploy to local / Arbitrum Sepolia / Arbitrum One

Stack: TypeScript · Node.js · Rust · Docker · GitHub Actions CI


MCP framework that lets AI agents autonomously manage DeFi positions on Rootstock/Bitcoin — with policy enforcement and session-scoped spend limits.

MCP Client (Claude / any AI)
│
▼
MCP Server (5 tools)
├── get_protocol_data → Money on Chain + Tropykus RPC
├── simulate_swap → viem call/estimateGas (no broadcast)
├── execute_intent → Session validation → Policy engine → sendRawTransaction
├── get_position_health → Tropykus health factor
└── get_wallet_balances → RBTC + ERC-20 balances

5 hard-coded policy rules block every unsafe action before broadcast — zero-address transfers, selfdestruct calls, single-tx values over 10 RBTC, spend cap overflows, and non-whitelisted contracts. Every decision (allow or deny) is written to an audit log.

Protocol integrations: Money on Chain (MoCState — BTC price, coverage ratio, BPRO/DOC rates) · Tropykus (Compound fork — supply/borrow APY, per-account health factor)

Stack: TypeScript · @modelcontextprotocol/sdk · viem · zod · tsup · Node.js ≥ 20


Rootstock-Python-SDKpip install rootstock-sdk

Python SDK for the Rootstock (RSK) blockchain — wallet management, ERC-20 tokens, smart contracts, RNS domain resolution.

fromrootstockimportRootstockProvider, Wallet, ERC20Tokenprovider=RootstockProvider.from_mainnet()
wallet=Wallet.from_private_key("0x...", chain_id=30)
# ERC-20 in 3 linesrif=ERC20Token.from_symbol(provider, "RIF")
print(rif.balance_of_human(wallet.address)) # "150.5"receipt=rif.transfer(wallet, to="0x...", amount=100*10**18)
# EIP-1191 Rootstock-specific checksumaddr=to_checksum_address("0x5aaeb6...", chain_id=30)

Covers: Wallet create/import/encrypt · RBTC transfers · ERC-20 (balance, transfer, approve) · arbitrary contract call/transact · RNS forward + reverse resolution · gas estimation · mainnet and testnet

Stack: Python ≥ 3.10 · web3.py · eth-account · pytest · ruff · PyPI published


Non-custodial sBTC yield optimizer on Stacks — compare live APY across Bitflow, ALEX, Zest, Velar, and Hermetica; rebalance in one atomic Clarity call.

;; vault.clar — core deposit/withdraw, 5% performance fee on yield only
(define-public (deposit (amountuint)))
(define-public (withdraw (amountuint)))
(define-read-only (get-position (userprincipal)))
(define-read-only (get-accrued-yield (userprincipal)))
;; yield-source trait — every protocol adapter implements this
(define-traityield-source-trait
((get-current-apy () (responseuintuint))
(deposit-sbtc (uint) (responsebooluint))
(withdraw-sbtc (uint) (responsebooluint))))

Adding a new protocol = one new adapter contract. Core vault never changes.

Architecture:contracts/ (Clarity 4: vault, yield-tracker, rebalancer, trait) · indexer/ (Node.js + TypeScript APY fetchers for each protocol, Express API) · frontend/ (React + Stacks.js, Leather + Xverse wallet connection, YieldTable, PositionCard, RebalanceModal)

Stack: Clarity 4 · Clarinet · TypeScript · React · Stacks.js · Vercel + Railway · Stacks Foundation grant


Open Source Contributions

Beyond my own repos, I contribute directly to protocol-level infrastructure used by other teams:

  • Bitcoin Dev Kit (BDK) — Added a fuzz/ crate with three cargo-fuzz targets: apply_update (fuzzing Wallet::apply_update with arbitrary txs/anchors), create_tx (fuzzing build_tx with arbitrary fee rates, amounts, and RBF), and descriptor_parse (fuzzing arbitrary bytes through IntoWalletDescriptor, covering miniscript/key-path/checksum handling) — plus a fuzz.yml CI workflow that builds on every PR and runs extended 60-second fuzzing sessions weekly with crash-artifact upload. (issue #61)
  • Polkadot SDK — Open and merged pull requests on pallet-revive's Ethereum JSON-RPC layer, part of ongoing Polkadot Technical Fellowship work. (view my PRs →)

Currently Building

ProjectWhatEcosystem
AnsimNon-custodial consumer-protection layer for KRW-stablecoin payments — reversible-window escrow, pre-sign safety screen, Dojang-anchored dispute resolutionGIWA (OP Stack) · GASOK accelerator
AvaGuardCircuit breaker + Guardian Agent SDK + Invariant CLI for Avalanche L1s — 30 tests, deployedAvalanche
SoroGuardPosition-protection protocol for Stellar DeFiStellar
ComputeLensCompute-unit profiler for Solana programsSolana

Shipped & Deployed

ProjectWhatStatus
Stylus-ToolkitCLI toolchain for Arbitrum Stylus — build, profile, deploy✅ Live on NPM · Arbitrum grant · Both milestones shipped
Rootstock-Agentic-DeFi-FrameworkAI agent DeFi execution layer on Rootstock/Bitcoin✅ Active
Rootstock-Python-SDKPython SDK for RSK — wallets, ERC-20, contracts, RNS✅ Published on PyPI
satoshi-yieldsBTC yield optimizer on Stacks🔄 In development · Stacks Foundation grant
AvaGuardCircuit breaker + Guardian Agent SDK for Avalanche L1s✅ Deployed · 30 tests passing

Security Research

20+ confirmed High/Medium findings across Sherlock, Code4rena, Cantina, and Immunefi. The same protocol knowledge that lets me build DeFi tooling also lets me find what breaks it.

SeverityProtocolFindingPlatform
🔴 HighSuperDCAMissing reward claiming mechanism — users permanently lose yieldSherlock
🔴 HighSukukFiCross-vault share fungibility breaks fund isolationSherlock
🔴 HighThreshold NetworkForce-decrease authorization logic inversion — unauthorized stake slashingImmunefi
🟡 MediumMerklPre-deposit double-spend — campaign rewards claimable before fundingSherlock
🟡 MediumSukukFiKYC fund lock — compliant users permanently locked outSherlock
🟡 MediumInverse FinanceDOS at MIN_ASSETS in jDOLA vault — deposits permanently frozenSherlock
🟡 MediumBrix MoneyCooldown stacking bypass — withdrawal delay circumventableSherlock
🟡 MediumLicenseTokenIP derivative registration DOS via gas exhaustionCantina

Rankings: #45 Ammplify · #48 Super DCA on Sherlock — full audit history →


Tech Stack

Languages

TypeScriptPythonSolidityRustClarityCairoMoveJavaScript

Frameworks & Tooling

Node.jsReactNext.jsFoundryHardhatAnchorClarinetviemweb3.py

Chains

EthereumArbitrumSolanaStacksRootstockPolkadotStarknetBNB ChainAptos


Open to

Security reviews · Protocol audits · Full stack / backend / blockchain engineering roles · Ecosystem grants · Dev tooling collaborations

Tamil Nadu, India · Polkadot Blockchain Academy Graduate · Polkadot Technical Fellowship Candidate · Superteam India · Solo since day one

Pinned Loading

  1. Stylus-ToolkitStylus-ToolkitPublic

    Build, deploy, and profile Stylus contracts with simple commands.

    TypeScript 20

  2. Rootstock-Agentic-DeFi-FrameworkRootstock-Agentic-DeFi-FrameworkPublic

    TypeScript 1

  3. Rootstock-Python-SDKRootstock-Python-SDKPublic

    Python 1

  4. satoshi-yieldsatoshi-yieldPublic

    1