Smart Contract Auditor (EVM, Daml)

Skills

About the Role

You will perform manual security reviews and static and dynamic analysis of smart contracts, identify vulnerabilities such as reentrancy and access control flaws, and produce clear, actionable audit reports with severity ratings and remediation guidance. You will collaborate with protocol teams to understand business logic, architecture, and threat models, and contribute to internal tooling, audit methodologies, and the knowledge base. You will stay current with the latest exploits, attack vectors, and ecosystem developments and provide proof-of-concepts and severity reasoning as part of your findings.

Requirements

• 2+ years in smart contract auditing or security focused smart contract development
• Strong EVM and Solidity protocol security experience
• Experience or strong understanding of advanced EVM areas such as account abstraction smart accounts paymasters module systems and Uniswap style liquidity systems
• Experience with lending vaults stablecoins staking restaking and RWA systems
• Knowledge of cross chain messaging and bridges including LayerZero Chainlink CCIP CCTP and canonical bridges
• Familiarity with modular and upgradeable architectures and governance controlled systems
• Practical Daml and Canton experience or strong Daml audit or development experience with a security mindset
• Understanding of Daml security concepts including signatories observers controllers authorization multi party consent privacy visibility and divulgence
• Ability to reason about complex protocol logic economic assumptions trust boundaries and cross contract interactions
• Strong written communication for audit findings PoCs severity reasoning and remediation guidance
• Public audit portfolio bug bounty findings CTFs or security research
• Tooling experience such as Foundry Echidna Medusa Certora Halmos Daml Script and Canton testing

Responsibilities

• Perform manual security reviews and static and dynamic analysis of smart contracts
• Identify vulnerabilities including reentrancy, access control flaws, logic errors, economic exploits, and protocol specific attack vectors
• Deliver clear actionable audit reports with severity ratings and remediation guidance
• Collaborate with protocol teams to understand business logic architecture and threat models
• Contribute to internal tooling audit methodologies and knowledge base
• Stay current with latest exploits attack vectors and ecosystem developments