№ 004 / LEDGER EDITION
AVAILABLE · Q2 2026
--:--:-- WIB · UTC+7 · Yogyakarta, ID
Dewangga PraxindoWeb3 Security ResearcherEst. 2022

Dewangga Praxindo. Web3 security researcher securing the smart contracts that move real money, and building the AI systems and products around them.

I'm a Web3 security researcher based in Yogyakarta, Indonesia. I audit the contracts that hold real money, and I build the AI systems and products around them. $50M+ TVL deployed, three PeckShield audits, zero criticals.

A ·Security ResearchAudits · Contests · 0 Critical
B ·AI SystemsAgents · RAG · Evals
C ·Full-StackNext · TypeScript · Cloud
1 / 3One engineer.
Three disciplines.
§ 01 What I build

Six things I can secure and ship for you, end-to-end.

01Security Research

Audit contests on Sherlock and Code4rena. Threat models before a line of code, Slither and Aderyn on every PR. Three PeckShield audits on protocols I engineered, zero critical findings.

AUDITED0 critical

02Smart Contracts

Solidity and Rust. Heavy testing before any audit: fuzz tests, invariants, and mutation testing run on every change.

STACK.sol · .rs

03DeFi & Onchain

Vaults, liquidity pools, and yield strategies that hold real user money. Production protocols on Arbitrum and Ethereum.

TVL$50M+

04AI Engineering

LLM agents, RAG pipelines, and evals that actually ship. Function calling, tool use, retrieval, and guardrails, from prompt to production.

MODELSGPT · Claude

05Full-Stack Apps

React, Next.js, TypeScript end to end. Auth, payments, realtime, and the database underneath. I ship the whole product, not a slice.

SHIPPEDNext · TS

06Infra & Ship

CI/CD, observability, and cloud. Postgres, edge functions, queues. The unglamorous parts that keep products alive at 3am.

UPTIME24/7
§ 02 How I work

Three phases. Same every time.

  1. 01DAYS 01-03

    Scope & design

    • Understand the problem before the stack. Read the code, the specs, the prior art.
    • Map the data flow and the trust boundaries. Mark every place value or state crosses one.
    • Pick the tools that fit (model, framework, chain) and write the spec we build to.
  2. 02WEEKS 01-04

    Build & test

    • Ship in vertical slices. Working software every week, not a big-bang reveal.
    • Tests live next to the code: evals for AI, e2e for apps, fuzz & invariants for contracts.
    • CI on every push. Type-safe end to end. Coverage gate before anything merges.
  3. 03FINAL WEEK

    Ship & watch

    • Deploy with rollback. Feature flags, timelocks, and a tested kill switch on the money paths.
    • Monitoring, logging, and traces wired in. I get paged before users do.
    • Audit the critical paths. On-call for the first 30 days after every launch.
§ 03 Selected works

Seven projects.
All live or in production.

TOLDPROOF · 2026SHIPPED

TOLDPROOF

A way for AI agents and people to prove their predictions are honest. Sealed on Sui, revealed on time.

AI AgentsSui Movex402
61/61 · 0 critical
AMALY · 2026SHIPPED

Amaly

A full-stack prayer-tracking app for Ramadan. Quran reader, streaks, and a leaderboard. Shipped as a PWA.

Full-StackNext.jsPWA
224+ users
REKON · 2026SHIPPED

RekonGG

AI-powered esports predictions on Polymarket. Model picks the edge, you pay in USDC with one click.

AINext.jsPolymarket
Live
LAZOR · 2026SHIPPED

LazorKit SDK

A Solana wallet template with Face ID and Touch ID. No seed phrases.

Full-StackSolanaWebAuthn
Dev template
VOUCH · 2026SHIPPED

Vouch Protocol

Prove things about your Solana wallet without revealing who you are. Built with Noir zero-knowledge circuits.

ZKSolanaNoir
Hackathon
BOH · 2022SHIPPED

Battle of Heroes

NFT battle game with fair, verifiable randomness. Chainlink hackathon winner in 2022.

SolidityChainlink VRF
$500 prize
§ 04 Security record

I hunt bugs in public,
against the whole field.

CREDENTIAL · № 001GRADUATE
RektOff Solana Auditor Bootcamp

RektOff Solana Auditor Bootcamp

Graduated from RektOff's Solana security bootcamp. Auditing Anchor and native programs: account validation, CPI safety, and the exploit patterns that drain protocols.

SOLANA · SECURITYCERTIFIED · 2026
CREDENTIAL · № 002TOP 25
Sherlock audit contest profile for BadGenius

Competitive audit contests

Public audit contests on Sherlock and Code4rena, competing against the whole field to find bugs before attackers do. Two Medium-severity findings on the XRP Ledger contest, finishing 20th.

Contests3
Mediums2
Best rank#20
Payouts$3.36K
SHERLOCK · CODE4RENAView profile
§ 05 Deploy log

Nine commits to production.

DEPLOY · LOG 5 LIVE / 9 TOTALSIGNED · DWX
DateProjectChainAddressNote
2026.04.12TOLDPROOFSUI TESTNET0x3450…22e4 61/61 tests · 0 critical
2026.03.05AMALY v2WEB · PWA·224 monthly users
2026.02.18REKON.GGPOLYMARKET·AI · esports predictions
2026.01.30LAZORKIT SDKSOLANA·WebAuthn template
2026.01.12VOUCH PROTOCOLSOLANA · NOIREhSk…LuaD ZK hackathon · finalist
2025.11.22FACTOR LEV WETH/USDCARBITRUM ONE0xcB31…D28f WETH/USDC Compound leverage
2025.09.04FACTOR MULTILEND USDCARBITRUM ONE0xf19c…6cd2 USDC multilend vault
2025.06.18FACTOR cbETH LENDINGBASE0xee65…40f6 cbETH boosted USDC lending
2022.10.09BATTLE OF HEROESETHEREUM·Chainlink hack · winner
END · OF · ROLL· · ·
§ 06 · Get in touch

Let's
build something
worth shipping.

I reply in under 24 hours on weekdays. Available for security reviews, audit contests, AI engineering, and full-stack product builds, starting Q2 2026.