Skip to main content
Smart contracts · DeFi · Security · ForensicsProposal brief

Blockchain & Smart Contracts

On-chain engineering built by someone who has lived both sides of it. Smart contracts and automated strategies, decentralized-finance integrations, and — above everything — the security discipline that decides whether on-chain code survives contact with an adversary. We develop, audit, and advise across centralized and decentralized finance; we do not sell tokens, manage your money, or promise returns. The deliverable is engineering and judgment, not a position. The same bench also does on-chain forensics — following the money when funds are stolen, and delivering evidence packets for individuals, counsel, and law enforcement — as investigation-for-hire, never custody and never a recovery promise.

Scope

What's in scope.

The boundary of the engagement is set in writing before work begins.

On-chain engineering built by someone who has lived both sides of it. Smart contracts and automated strategies, decentralized-finance integrations, and — above everything — the security discipline that decides whether on-chain code survives contact with an adversary. We develop, audit, and advise across centralized and decentralized finance; we do not sell tokens, manage your money, or promise returns. The deliverable is engineering and judgment, not a position. The same bench also does on-chain forensics — following the money when funds are stolen, and delivering evidence packets for individuals, counsel, and law enforcement — as investigation-for-hire, never custody and never a recovery promise.

Scope is written collaboratively during discovery and signed off before any build work starts. Changes are handled as written amendments, not surprise invoices.

Method

How we build.

The discipline below is constant across engagements — engineering and investigation alike. On a public, adversarial network, it is the difference between code that holds and code that becomes someone else's payday, and between an evidence packet that is citeable and one that is not.

  • Security is the whole job, not the last step.

    Smart contracts are adversarial software running on a public network where every line is readable and every bug is a bounty for someone else. We design under a written threat model, reason through reentrancy, oracle manipulation, MEV exposure, access-control and upgrade paths before code ships, and treat key management as a first-class part of the architecture. The founder rebuilt this practice on the other side of a DeFi exploit — the security posture here is lived, not borrowed.

  • Multi-chain fluency, chosen per engagement.

    EVM chains and L2s, the major non-EVM networks, and the bridges between them — we pick the chain for the operation in front of us rather than the one with the loudest token. The same goes for the protocols a build composes on: established, audited venues like Aave and Balancer over whatever launched last week.

  • Risk made explicit, on both sides of the aisle.

    Centralized and decentralized finance each carry a different risk surface — custody, counterparty, smart-contract, regulatory, liquidity. We name them plainly, in writing, so a client understands what they are taking on before they take it on. No hype, no maximalism, no pretending the downside isn't real.

  • Built and audited, never gambled.

    Trading bots, flashloan-powered arbitrage, and MEV-aware execution are engineering problems with hard correctness and safety requirements — not a casino. We build them to specification, test them against adversarial and edge-case conditions, and hand back something a client can reason about. What a client chooses to do with capital is their decision; our job is that the system does exactly what it says.

  • Reproducible forensics, banded confidence.

    The investigation work holds to the same standard as the engineering. Every conclusion in a RESILIENCE evidence packet ships with the queries, the heuristics, and the confidence band that produced it, anchored to a specific block height and UTC timestamp — a second qualified analyst with the same data can reproduce it. We do not publish conclusions we cannot defend in writing.

  • In-house tooling, senior review on every artifact.

    We do not re-sell another firm's labelled-address dataset or hand back an output we cannot reproduce. Cluster reconstruction, mixer-pool reconciliation, bridge-event stitching, and deposit-address resolution are built in-house and audited against ground truth. No report leaves the practice without a second pair of senior eyes on the methodology and the redaction discipline.

On-chain agents

Agents that live on the chain.

Autonomous agents are the practice's signature. These are the ones that live on the chain itself — watching pools, pricing spreads, and executing in the same block they decide in. We build them to a written spec, test them against adversarial and edge-case conditions, and hand back a machine a client can reason about.

  • Arbitrage

    Cross-venue arbitrage agents.

    Price the same asset across DEXs, pools, and lending venues, and execute when the spread clears fees and gas. Routing, slippage bounds, and revert-on-loss guards are written into the contract, not left to a hopeful transaction.

  • MEV-aware execution

    MEV-aware executors.

    Bundle construction, private-relay submission, and sandwich- and front-run-resistant ordering — so the agent's own transactions are not the ones being extracted from. We treat the mempool as the adversarial surface it is.

  • Monitoring

    Market-monitoring & liquidation-adjacent bots.

    Agents that watch positions, oracle prices, and pool health around the clock and act inside a defined mandate — with exposure caps and kill-switches that are part of the code, not a note in a runbook.

Two ways to fund the machine.

The agent is the same either way. What differs is where the capital it moves comes from.

Lane A

Self-funded.

The client's own capital, sized to the client's own risk appetite. Position sizing, exposure caps, and kill-switches are written into the agent so the limits hold under load — not left to discipline in the moment.

  • Client-owned capital, client-controlled keys
  • Exposure caps and kill-switches enforced in code
  • Full observability into every position and fill
Lane B

Flashloan-financed.

Liquidity borrowed from established protocols — Aave, Balancer — inside a single transaction, with no upfront collateral. The loan and its repayment settle atomically: the strategy either completes and repays in the same block, or the whole transaction reverts and no debt ever existed.

  • No upfront collateral — the loan lives for one transaction
  • Borrowed from audited venues (Aave, Balancer)
  • Atomic: repay in-block or the whole trade reverts

Anatomy of a flashloan.

A flashloan is not a loan you carry. It lives and dies inside one transaction — which is exactly what makes it safe to build on.

  1. 01

    Borrow

    The agent takes a flashloan from the lending venue — no collateral posted.

  2. 02

    Execute

    It runs the strategy with the borrowed liquidity: swaps, routes, arbitrage legs.

  3. 03

    Repay + fee

    It returns the principal plus the protocol fee before the transaction ends.

  4. 04

    Settle or revert

    If repayment holds, the block settles. If any step fails, everything reverts.

One transaction. If any step fails, none of it happened.

What a strategy earns is a function of the market and the parameters the client sets. We make no performance claims and never touch client capital — the deliverable is the machine, its safety rails, and the documentation to reason about it.

Deliverables

What you'll receive.

  • On-chain agents & automated trading strategies

    Production smart contracts and autonomous on-chain agents — trading bots, cross-venue arbitrage, and MEV-aware execution. Funded two ways: with the client's own capital, or flashloan-financed through established protocols like Aave and Balancer, where liquidity is borrowed with no upfront collateral and settles atomically in a single transaction — repay in-block, or the whole trade reverts as if it never happened. Designed against a written spec, tested against adversarial conditions, and shipped with the safety rails on-chain code demands.

    From $5,999 · typical builds $6K–$120K

  • DeFi engineering & protocol integration

    Integrations with established protocols — lending and borrowing on Aave, liquidity and pools on Balancer, staking, and node operation. Decentralized-finance plumbing wired into your product without the brittle glue.

    From $4,999 · scoped per integration

  • Blockchain security & smart-contract audits

    Spotlight

    Threat modeling, line-by-line contract review, and key-management hardening for teams shipping on-chain. The most important work we do here — and the reason the rest of it holds.

    From $3,999 · scoped per audit

  • Blockchain consulting & education

    Plain-language guidance on centralized and decentralized finance — the benefits, the real risks, and where the two meet. For founders, teams, and individuals who want to understand the space before they commit to it.

    From $1,999 / month · advisory retainer

  • Stolen-fund tracing & recovery support

    Spotlight

    Wallet clustering, bridge and mixer tracing, exchange liaison, and custom on-chain tooling we build in-house when an investigation calls for it — the work of following the money to where it currently sits. We are confident in tracing; we are honest about recovery. Public ledgers are immutable and self-custody wallets are non-penetrable by design, so any firm promising guaranteed recovery from the chain itself deserves a hard second look. What we deliver is the truth of where funds went, who controls them now, and the evidence packet your attorney, exchange contact, or law-enforcement officer needs to act on it.

    From $4,499 · typical cases $4.5K–$45K

  • Investigations for individuals & families

    Personal engagements for victims of fraud, theft, scams, and rug pulls — many of whom have nowhere else to turn. We take the case, do the work, and deliver an evidence packet that puts the next move in your hands.

    From $1,999 · individuals & families

  • Law-enforcement engagements

    RESILIENCE works with state, county, federal, and international law-enforcement agencies on cases involving lost or stolen funds. We deliver evidence packets to the requesting officer; we do not testify, we do not appear in court — courtroom presentation stays with the agency and counsel.

    From $3,499 · law-enforcement rate

  • Attorney engagements

    RESILIENCE works directly with plaintiff and defense counsel on civil matters that touch the chain — fraud, asset recovery, divorce-asset tracing, estate matters, contract disputes. We deliver a written evidence packet you can use to inform negotiation, demand letters, discovery, or pleadings. We do not appear in court; counsel handles the legal surface.

    From $4,499 · counsel-of-record rate

  • Evidence reports for investigators & counsel

    Reproducible methodology, on-chain transaction graphs annotated with block heights and timestamps, and a written report that documents what we found, how, and how confident we are. Designed to be read and acted on by the requesting officer or counsel — not by a courtroom.

    From $2,499 per report

Who we work with

Two constituencies, written down separately.

Forensics engagements split into public-sector and counsel-of-record work. Each has its own page, its own engagement model, and its own refusal lanes.

For state and federal agencies

Public-sector liaison.

We work with state, county, federal, and international law-enforcement agencies on cases involving lost or stolen funds. We deliver evidence packets to the requesting officer; we do not testify, we do not appear in court.

For law enforcement
For plaintiff and defense counsel

Counsel-of-record liaison.

We work with attorneys on civil matters that touch the chain — fraud, asset recovery, divorce, estate, contract disputes. Evidence packets your firm uses to inform negotiation, demand, settlement, discovery, or pleadings. The legal surface stays with you.

For attorneys
Selected work

One we can describe.

Anonymized by sector and region only. The full archive lives at /work.

Blockchain & smart contracts2025

A DeFi lending protocol, scope redacted

A full-stack smart-contract security audit — findings by severity, refusal lanes enforced, operator sign-off on every mitigation.

Critical finding (mitigated pre-mainnet)
1
Contracts in scope
4
Operator sign-off on mitigations
100%

The protocol was preparing a mainnet upgrade across four core contracts and needed an audit that read like engineering, not a marketing PDF. The engagement was a structured security review — static analysis, symbolic paths, and manual review — bound by refusal lanes that forbid automated mainnet execution, fund movement, or performance claims. Every finding is severity-banded; every recommendation waits for the client's security lead to accept, defer, or reject.

Methodology
  1. 01
    Refusal lanes before tooling

    Documented the no-list first: no mainnet deploy without signed release, no live fund movement, no yield or return language in the audit surface. The tooling respects the same boundaries the final report does.

  2. 02
    Layered analysis surface

    Static analysis for known vulnerability classes, symbolic execution on critical paths, manual review on access control and oracle wiring. Findings keyed to contract, line range, and reproducible test case.

  3. 03
    Severity-banded reporting

    Critical and High findings block the release record until acknowledged or mitigated. Medium and Informational ship with explicit deferral options — nothing silently dropped.

  4. 04
    Operator owns every mitigation

    Recommendations are drafted; the client's security lead decides. Every decision is logged immutably. The integrity metric is 100% operator sign-off, not finding count.

The audit surfaces risk. The operator decides what ships.

Source notes redacted · Client identification withheld by agreement

Timeline

A predictable cadence.

Every engagement runs on the same four-stage rhythm, regardless of size.

  1. Discovery

    Week 0

    Working session, written scope, clear success criteria.

  2. Design & architecture

    Week 1

    System design, milestones, fixed or weekly pricing.

  3. Build

    Weeks 2+

    Weekly releases, live portal, direct access to engineers.

  4. Launch & handoff

    Final week

    Production hardening, observability, written handoff.

FAQ

Common questions.

How do you price engagements?
Fixed-price for well-scoped work, weekly retainer for open-ended or exploratory engagements. Pricing is always in the proposal brief before any contract.
Do you work with existing teams?
Yes. We regularly embed with in-house engineers, or augment a small team with specific capabilities — AI integration, infrastructure, design — for a defined period.
What happens after launch?
Either a written handoff so your team owns everything, or an ongoing retainer for maintenance, features, and on-call support. Your choice, stated up-front.