Solidity/Foundry · Solana/Anchor · React/wagmi · Python/FastAPI. Everything on this page links to verifiable evidence: verified contracts, live dApps, or on-chain transactions. Testnet work is labeled testnet — never inflated.
A multi-contract protocol that integrates the whole stack, built to asset-manager standards.
Tokenized T-Bill vault built on ERC-7540 (async request→fulfill→claim, the RWA standard used by Centrifuge/Maple): UUPS upgradeable with a live V1→V2 upgrade executed on-chain, Chainlink-compatible NAV oracle, role-based access control, The Graph subgraph feeding an activity + analytics dApp, and Chainlink Automation + CCIP cross-chain deposits running live. 140+ Foundry tests, adversarial self-audit with full Slither triage (SECURITY.md), storage-layout checks across upgrades.
Foundry-first: fuzzing, invariant suites, gas snapshots and CI on every repo. All contracts verified on public testnets.
Privacy Pools (Buterin et al.) implemented end-to-end: ERC-5564/6538 stealth addresses plus a ZK privacy pool with association sets — Circom circuit (21.7k constraints), Groth16 proving in the browser, Poseidon tree on-chain, and fraud-proof slashing for the ASP. A real ZK withdrawal executed on Sepolia. 71 Foundry tests + circuit tests. Read the case study.
Yield vault with inflation-attack protection, deposit cap and yield accrual — plus a hand-rolled ERC-7540 async vault. 45 tests, 4 invariants, 100% coverage. Both verified on Sepolia.
Account-abstraction smart wallet with sponsored gas (EntryPoint v0.7 + Pimlico paymaster). Includes a real gasless transaction sent from an account holding 0 ETH. 16 tests, 100% coverage.
On-chain subscription passes for trading-signal bots. 76 tests with an invariant suite and SafeERC20 hardening. Same bytecode verified on Ethereum Sepolia, Base Sepolia and Arbitrum Sepolia.
Full-stack exchange demo: live market data, on-chain staking with a real wallet, paper-trading bots (DCA/Grid/SMA), AI assistant, i18n EN/ES/PT. Ships a post-mortem of a real economic bug caught by adversarial audit before the v2 redeploy.
Vertical slice of an on-chain developer-reputation system: soulbound ERC-721 (OZ v5) with EIP-712 attester-gated minting plus a deterministic scoring engine over live on-chain data.
The core DeFi primitives implemented natively in Anchor — PDAs, CPI-signed vaults, canonical account design. Deployed and exercised for real on devnet. Read the case study or try them all in the live devnet hub ↗
Constant-product AMM (Uniswap V2 model): one pool per canonical mint pair (no factory), PDA-owned vaults and LP mint, √(a·b) initial liquidity, bps fee, all rounding in the pool's favor. Full cycle exercised on devnet — pool init, add liquidity, swap, remove — signatures in the README.
Two-token atomic escrow (make / take / refund): Offer PDA + vault the PDA signs for via CPI. A real 100↔250 token swap settled on devnet, signatures in the README.
Linear + cliff, revocable SPL vesting (the VestingWallet pattern, Solana-native): schedule PDA + token vault released by CPI. Real initialize→release cycle confirmed on devnet.
Time-based subscription pass — a cross-chain port of BotPass showing the same product in both ecosystems. Initialize + subscribe confirmed on-chain.
Every Solidity repo above ships a SECURITY.md: threat model, blast radius per role, full Slither triage, invariant testing. Plus deliberate offensive practice:
7 challenges solved with verified Foundry exploits and auditor-grade write-ups: vulnerability class → root cause → exploit walkthrough → remediation → real-world parallel. Progress tracked honestly (7/18).
22-attack prompt-injection benchmark with a deterministic judge, run against a live production bot (found it vulnerable: indirect injection + system-prompt leak, then documented).
Python/Node services running 24/7 on Cloudflare Workers, Render and Railway. Note: free-tier backends may take ~30s to wake.
FX/crypto arbitrage monitor for the Argentine market: traditional dollar vs USDT/ARS and crypto↔crypto spreads (CriptoYa API). Monitoring only — no execution, no yield promises.
Unified real-time dashboard for my crypto bots (spot accumulation, futures paper-trading, market agents) running on Cloudflare Workers — testnet capital, honest numbers.
Conversational Telegram bot on the Groq LLM API: context memory, multi-user, configurable persona without touching code. Clean template used as the base for client work.
Telegram + WhatsApp bot template with an adapter layer and AI replies — one codebase, two platforms, deployed on Railway.
15+ years in sales and commercial roles before going full-time technical — I scope requirements, communicate progress and handle deadlines like someone who has owned client relationships, because I have.
I build with an AI-augmented workflow (spec → build → adversarial review) and hold every project to the same bar: a milestone, shipped evidence, and a lesson. If it doesn't have a deploy, a verified contract or a live demo, it's not done.
Based in Buenos Aires (UTC-3). Async-first collaboration: clear written updates, Loom walkthroughs, tight milestones.