# Public security work by Raiders Canonical: https://www.web3sec.news/work Security testing for crypto applications across web interfaces, APIs, backend services, infrastructure and operational dependencies. Raiders brings 6+ years of security industry experience, including security engineering leadership and full-stack penetration testing for crypto projects. Work connects smart-contract assumptions with the applications, identities, infrastructure and release paths around them. An engagement starts with the assets and user journeys that need protecting, then agrees on the actual review boundary. Professional background describes Raiders’ experience. The linked records below show specific public contributions and report credits; each source establishes its own scope and attribution. ## MITRE AADAPT — Supply Chain Compromise (ADT1195) Type: Framework contribution Role: Named contributor: Chirag Agrawal, Web3Sec.News MITRE AADAPT lists Chirag Agrawal, Web3Sec.News, as a contributor to its Supply Chain Compromise technique. The entry describes manipulation of products and delivery paths, with context for the digital-asset ecosystem. Scope: Supply-chain compromise; Software distribution and delivery paths; Digital-asset operational dependencies [MITRE AADAPT: ADT1195 — Supply Chain Compromise](https://aadapt.mitre.org/techniques/ADT1195/) ## MITRE AADAPT — Software Dependencies and Development Tools (ADT1195.001) Type: Framework contribution Role: Named contributor: Chirag Agrawal, Web3Sec.News MITRE AADAPT also lists Chirag Agrawal, Web3Sec.News, as a contributor to the subtechnique Compromise Software Dependencies and Development Tools. Its scope connects compromised development components with cryptocurrency software and operational systems. Scope: Software dependencies and development tools; Malicious changes to trusted components; Wallet and digital-asset software supply chains [MITRE AADAPT: ADT1195.001 — Compromise Software Dependencies and Development Tools](https://aadapt.mitre.org/techniques/ADT1195.001/) ## MetaMask Connect — public audit summary Type: Audit report Role: Credited lead auditor in Cyfrin’s published summary Record year: 2026 Cyfrin’s published v2.0 summary credits Raiders as lead auditor, with an assisting auditor. The scoped work spans SDK, mobile and extension integrations and relay infrastructure. Scope: SDK and wallet integrations; Mobile and extension communication; Relay infrastructure [Cyfrin: MetaMask Connect public summary (PDF)](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf) ## Predict.fun Chainlink CRE integration — public audit summary Type: Audit report Role: Credited joint lead auditor in Cyfrin’s published summary Record year: 2026 Cyfrin’s published v2.1 summary credits Jorge and Raiders as lead auditors. The reviewed integration includes Solidity adapters and TypeScript CRE workflows. Scope: Solidity adapters; TypeScript CRE workflows; Integration boundaries [Cyfrin: Predict.fun CRE integration public summary (PDF)](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf) ## unflat collaborative audit Type: Audit report Role: Named Lead Security Expert in a collaborative audit Record year: 2026 A public Sherlock report names Raiders alongside 0x69 as Lead Security Experts. The examined repositories include mobile and fund-flow service components. Scope: Mobile application; Fund-flow services; Authentication and local storage paths [Sherlock: unflat collaborative audit report (PDF)](https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.15%20-%20Final%20-%20unflat%20Collaborative%20Audit%20Report%201784139374.pdf) ## CVE-2022-4722: rdiffweb authentication bypass Type: Vulnerability disclosure Role: Research listed in Raiders’ public vulnerability portfolio Record year: 2022 Raiders’ public portfolio lists this research. The CVE record documents an authentication-bypass issue in rdiffweb before version 2.5.5. Scope: Authentication; Web application security [NVD: CVE-2022-4722](https://nvd.nist.gov/vuln/detail/CVE-2022-4722) [Raiders’ public research portfolio](https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md) ## CVE-2023-3067: Trilium stored cross-site scripting Type: Vulnerability disclosure Role: First-person published vulnerability research Record year: 2023 Raiders’ public portfolio lists this research. The CVE record documents stored cross-site scripting in Trilium before version 0.59.4. Scope: Stored cross-site scripting; Application security [NVD: CVE-2023-3067](https://nvd.nist.gov/vuln/detail/CVE-2023-3067) [Raiders’ published research write-up](https://infosecwriteups.com/22-6k-github-stars-note-taking-app-hit-by-critical-xss-vulnerability-842da56ae265) ## SEAL Domain & DNS Security framework Type: Framework contribution Role: Named author on the published framework overview SEAL’s framework overview credits Raiders as an author, connecting domain and DNS controls to the infrastructure behind applications. Scope: Domain and registrar controls; DNS security; Infrastructure dependencies [SEAL: Domain & DNS Security overview](https://frameworks.securityalliance.org/infrastructure/domain-and-dns-security/overview/) ## DNS monitoring, alerts and incident response Type: Framework contribution Role: Named author on the published chapter A second SEAL chapter credits Raiders for material on DNS change detection, alerting and response responsibilities. Scope: DNS change monitoring; Alert ownership; Incident response preparation [SEAL: Monitoring, Alerts, and Incident Response](https://frameworks.securityalliance.org/infrastructure/domain-and-dns-security/monitoring-and-alerting/) ## Community participation ETHSecurity Badge holder — TheDAO Security Fund. Selected for TheDAO Security Fund’s ETHSecurity Badge in April 2026. The program recognizes researchers who help secure Ethereum and participate in decisions about security funding. [Raiders’ badge-holder announcement](https://x.com/__Raiders/status/2043883600152801651) · [TheDAO Security Fund: ETHSecurity Badge](https://thedao.fund/ethsecurity-badges/) · [TheDAO Security Fund: badge selection process](https://paragraph.com/@thedao.fund/thedao-is-becoming-a-dao-again) ## Ethereum security public goods Web3Sec.News and DigiBastion have both received Ethereum-security public-goods funding through TheDAO Security Fund. Its transparency record lists both projects as funded recipients. ### Web3Sec.News: Security Intelligence & Newsletter Security intelligence, research and education. Public-goods security research and newsletter work for the Ethereum ecosystem. ### DigiBastion: DNS, OpSec & Supply Chain Security Domain, operational and supply-chain security. A public-goods initiative focused on the infrastructure and operational dependencies around crypto applications. [TheDAO Security Fund: Who we funded](https://thedao.fund/transparency/) ## Reading the records Public links document the named work, role and scope. A collaborative report credit describes that contribution; it does not imply sole authorship, current employment by the publisher or endorsement of every Web3Sec service. Framework contributor credits describe the published contribution, not employment, certification or endorsement of Web3Sec services by the framework publisher. A report covers its stated artifacts and review period. Later releases and fixes require their own review. Confidential engagements are not turned into public case studies without authorization.