Stefany Santos
AI Automation | Security Researcher
Profile in progress
Stefany is building their profile!
Profit-Leak Store Audit — Sample Deliverable Description: Shopify and Amazon storefront analysis identifying exact conversion drop-off points, SEO gaps, and keyword mismatches. Delivered as a 2-page Profit Leak Map PDF ranked by fastest ROI fix.
1
75
PreFlight Security Toolkit Description: Built an automated reconnaissance suite for Web3 security research — IDOR fuzzer, smart contract repo digester, and lead monitor. Reduces manual audit prep from 4 hours to under 30 minutes. Open source on GitHub.
2
2
83
Smart Contract Audit — Governance DoS Vulnerability Description: Discovered a High-severity invariant violation in a DeFi governance contract. The removeNominee function leaks decay slope, causing totalWeight to reach zero prematurely and permanently halting all reward distributions. Verified with a full Foundry proof-of-concept.
1
70
Critical IDOR Discovery — Web3 Protocol
Identified a zero-click, unauthenticated IDOR vulnerability in a major L2 protocol's support infrastructure. Chained an unauthenticated wallet-to-userId lookup with an unprotected Server-Sent Events stream, enabling live surveillance of any user's private support tickets and KYC data with no authentication required. Two-command curl PoC. Submitted to protocol security team directly. Confidential.
0
38