Web3-Security-Research

Web3 Security Research Lab

Smart Contract Security • DeFi Risk Analysis • AI-Assisted Auditing

Welcome to my research lab.

I am Firman Siregar, a smart contract security researcher focused on understanding how DeFi protocols fail — and how to systematically detect those failures.

---

🧠 Research Focus

This lab explores three core areas:

• DeFi Attack Surfaces
  How protocol design creates hidden risks

• Exploit Pattern Recognition
  Learning from real-world incidents to identify recurring vulnerabilities

• AI-Assisted Auditing
  Using structured prompts and models to improve vulnerability discovery

---

🔬 Flagship Research

The Anatomy of DeFi Exploits

Adversarial Thinking vs Broken Invariants

This research distills insights from 100 real-world DeFi incidents into a structured framework:

• how attackers think
• what assumptions protocols break
• why exploits repeatedly occur

👉 Explore Vulnerability Patterns

---

📊 Core Research Areas

🔴 Exploit Case Studies

Breakdowns of real-world DeFi incidents and attack execution.

👉 exploit-case-studies/

---

🔵 Vulnerability Patterns

Generalized failure modes derived from multiple exploits.

👉 vulnerability-patterns/

---

🟣 AI Security Research

Exploring how AI can assist in smart contract auditing.

👉 ai-security-research/

---

🟡 Audit Frameworks

Structured methodologies for analyzing smart contracts.

👉 ai-security-audit-frameworks/

---

🛡️ Practical Work

• Audit Reports → audit-reports/
• Contest Findings → contest-findings/

---

📘 Publications

Web3 Security Essentials
A structured roadmap to mastering smart contract security.

---

🚀 100 Days of DeFi Incident Study

A long-form research project analyzing real-world exploits.

👉 https://x.com/0xfirmanregar/status/2029946793761591459

---

🧭 Research Philosophy

Security is not just about finding bugs.

It is about understanding:

• how systems fail
• how attackers think
• how assumptions break under adversarial conditions

---

🤝 Connect

If you’re working on:

• smart contract security
• DeFi protocol design
• AI-assisted auditing

I’m open to collaboration and research opportunities.

This site is open source. Improve this page.