The journal that balanced and lied
Sixteen tests passed against a settlement saga whose compensation order was reversed. What a balanced journal does not tell you, and what mutation testing does.
Software engineer building around blockchain, AI and cloud technologies while making it usable by the developers who adopt it.
Currently interested in agentic finance, cross-border stablecoin rails, onchain markets, and data security infrastructure.
Sealed-bid auctions on Zcash. The clearing price is public; the bidders are not.
An open-source kit for private, verifiable sales settled in shielded ZEC. Bid from any Zcash wallet by scanning one QR, escrow spend authority is split across three trustees with FROST 2-of-3, and after close anyone can rescan the chain with the published viewing key and recompute the price, the winners and every bidder’s outcome.
A bid memo’s refund address was stored unchecked, so a single malformed one broke every refund batch it joined — blocking refunds for everyone in that batch. Unusable addresses are now dropped at ingest: the bid still counts, and its refund goes to manual review.
Stablecoin settlement and treasury rails for payment companies moving money into and out of Africa.
Collect EUR or USD abroad and pay out NGN or KES without pre-funding foreign bank accounts. Tempo is the settlement hub, Solana carries on and off-ramp liquidity, an optional Zcash lane settles suppliers privately, and one double-entry ledger reconciles all three.
A live testnet hop burned the USDC and Circle's attestation completed, but the final mint is restricted to Across's own relayer, which never ran it. Every leg is compensated independently now, and funds sit in a Corridor address between hops rather than in flight.
Non-custodial stablecoin swaps between Tempo and Solana, composed through Base.
Non-custodial stablecoin swaps between Tempo and Solana mainnet. The browser never holds a bridge credential — same-origin Pages Functions validate each leg, inject the integrator ID server-side, and hand back short-lived quotes.
Across has no direct Tempo↔Solana route, so every swap is composed as two independent legs through Base. Pairs it cannot actually fill are rejected rather than quoted synthetically — a real price or none.
Card-free payments on the phone a shopkeeper already owns — and the sale still completes offline.
Accept payments on the Android phone a shopkeeper already owns. The money settles in USDC on Solana, the merchant sees their own currency, and a licensed partner pays it into their own bank — and the sale still completes when neither phone has a network.
@noble/curves does not default to low-S on P-256, and a high-S signature does not settle on chain. Two facts that cost a day if you meet them late, now pinned by tests on every signing path.
Cross-border stablecoin and fiat infrastructure for the EU↔Africa corridor.
Cross-border stablecoin and fiat infrastructure for the EU↔Africa corridor — the backend of a payments business that moves money between Europe and Africa in seconds. Multichain rails, a double-entry ledger, and settlement modelled as a finite state machine so every transfer has one legal next step.
Reversing the compensation order passed all sixteen tests. The journal balanced and described the wrong step.
A marketplace for autonomous trading agents, with custody-preserving vaults built twice.
A marketplace for autonomous trading agents in prediction markets. Developers list self-built, self-hosted agents; traders allocate capital those agents trade on their behalf. Custody-preserving vaults built twice against one specification — Anchor on Solana, Solidity on Polygon.
Solana gives each vault a PDA. On EVM that is pointless gas, so the accounting had to change and the security properties did not.
The intelligence layer for Robinhood Chain — token discovery, wallet reputation, live analysis.
The intelligence layer for Robinhood Chain: real-time token discovery, wallet reputation scoring, and a market analyst grounded in live on-chain data. Launched onto a chain barely a month old that was already among the highest by DEX volume — hundreds of tokens, no tooling built for the terrain.
Retina Terminal runs on free public data APIs, so the twenty-second refresh ceiling is written in the README rather than hidden. A first-party indexer for chain 4663 is in progress to replace them.
Protocol-level MagicBlock ephemeral rollup integration for cross-border rate infrastructure.
Protocol-level MagicBlock ephemeral rollup integration for cross-border rate infrastructure. An Anchor program holds fiat-to-crypto rates in a PDA, delegates it to a rollup for high-frequency oracle writes, then settles back to mainnet.
Delegation is implemented twice, on two branches — by hand, and through the SDK macros that hide exactly the serialisation the manual path has to get right. Demoed at Web3Lagos 2025.
Market intelligence and trading operations for Solana, built around Bags.
Market intelligence and trading operations for Solana, built around Bags: wallet-only identity, developer signals, semantic search over market history, and a job runtime with retries and a dead-letter queue.
npm records platform-specific binaries only for the platform that resolved them, so a lockfile built on macOS quietly omits what Linux CI needs. It broke the build three times before it got written down.
An on-chain quiz platform for communities, with rewards settled on Solana.
An on-chain quiz platform for communities, with rewards settled on Solana. Organisers run timed rounds, players earn from a funded prize pool, and results resolve on-chain. Solana Foundation grant recipient.
Quiz rounds are real-time but settlement is not, so scoring had to be authoritative off-chain and only the payout committed on-chain — the alternative was paying for every wrong answer.
A global prediction market on Fantasy Premier League performance, settled on Solana.
A global prediction market on Fantasy Premier League performance, settled on Solana. Import an FPL team, stake against a weekly pool, get paid on tiered percentiles once official results land.
Each market is its own liquidity pool, funded entirely by entrants — no market makers. That makes escrow the whole design, and a result feed that never arrives the failure worth worrying about.
An operating-intelligence layer for founders — from market gap to launch to monitoring.
An operating-intelligence layer for founders. It finds market gaps worth building into, reads the product being built, judges whether an onchain economy makes sense around it, hands off to Orynth for the launch, then keeps monitoring the company afterwards.
Entities with no signals were being scored against mock fixtures and fabricating results. Nothing is called an opportunity now without evidence from two independent sources.
A security audit of a Solana lending protocol: eight findings, each with a working exploit.
A security audit of MetaLend, a Solana lending protocol — multi-asset markets, interest-bearing cTokens, flash loans with external callbacks, and oracle-priced liquidation. Eight vulnerabilities across static review and exploit development: five critical, two high, one medium. Real-time project for the Rektoff security cohort.
Findings are not claims. Each one ships with a test that runs the attack — flash-loan reentrancy through the external CPI callback, a PDA seed collision, and an oracle manipulation that makes a healthy position liquidatable.
Reading, tooling, and reference material for getting started on Solana, kept in order rather than scattered.
View repoLedger invariants, the settlement state machine, and the chaos suite that proves them.
Read docsOne specification, two runtimes: PDA custody on Solana against a singleton on EVM.
Read docsPublic API surface, refresh ceilings, and the wallet reputation model, stated up front.
Read docsThe decision log, the hub-and-spoke routing model, and why settlement, liquidity and privacy each sit on a different chain.
Read docsA card-free payment taken on the Android phone a shopkeeper already owns — settled in USDC on Solana, shown to them in their own currency, and paid into their own bank by a licensed partner.
Read docsBuilding on Solana from a region where the connection drops: retries and failover against QuickNode's endpoints, WebSockets and the NFT API, and two dApps — remittance and agricultural supply chain — worked through in code.
A working tour of Helius for Solana developers: RPC nodes, enhanced APIs, webhooks and the DAS API, with the code for each and the practices that keep them cheap.
Sixteen tests passed against a settlement saga whose compensation order was reversed. What a balanced journal does not tell you, and what mutation testing does.
One custody specification implemented on Solana and on EVM. Where the account model forces the accounting to diverge, and where the security properties have to hold anyway.
Block time is not settlement time. Where the difference comes from, and why a payments system has to care about the second number.