KHASBI.M
Khasbi Maulana
Open to opportunities

Khasbi Maulana

Full-Stack Dev, Web3 Builder, Security Researcher

Python TypeScript Solidity Rust
Download CV View Work
About

Building at the edge of Web3.

I ship full-stack systems around Web3 infrastructure, AI agents, and smart contract security. My work ranges from open-source Python toolkits to production bot farms and validated security disclosures.

Currently focused on freelance Web3 architecture, security audits, and autonomous agentic systems.

19GitHub stars
1,149+Tests passing
7+Findings submitted
24Web3 modules
Selected Work

Projects and tools I have shipped.

Open SourcePython

Web3 Agent Kit

Modular Python toolkit for onchain agents - swaps, lending, restaking, cross-chain ops, Solana + DEX aggregation across 8 chains. v1.13.0 on PyPI, 19 GitHub stars.

PythonWeb3.pyDeFiSolana
GitHub ->
AutomationNode.js

Game Bots

Socket.io farmers, marketplace snipers, PvE loops - production Web3 game automation on Solana and EVM.

Node.jsSolanaSocket.io
GitHub ->
SecurityResearch

Bug Bounty and Audits

Independent DeFi security research, Web2 API pentesting, and smart contract audits with paid bounties.

SolidityRustRecon
See bounties ->
BountySolana

Solana AI Kit

Submitted token intelligence skill to Superteam Earn bounty - multi-source token analysis with AI safety scoring. Runner-up in Solana Security Audit track.

SolanaAIAudit
Superteam ->
Skills

Stack I work with.

Languages

  • Python
  • TypeScript
  • Solidity
  • Rust
  • Go

Web3

  • EVM Contracts
  • Solana
  • DeFi Protocols
  • Foundry
  • Wallets

Infrastructure

  • Node.js
  • FastAPI
  • Docker
  • PostgreSQL
  • Linux/VPS

Security

  • Smart Contract Audit
  • Recon/OSINT
  • API Pentesting
  • Exploit PoCs
  • Bug Bounty Report
Bug Bounties

Validated findings.

OnRe Finance

Spring Boot Actuator infra leak - trading strategy and wallet exposure.

$300 paid
Submitted

Vultr

Source maps + Sentry DSN leak on cloud console - full API surface exposed.

Pending

PerpX

API security vulnerability - paid $400 (bonus over $350 bounty).

$400 paid
Acknowledged

eToro

MCP server vulnerability - valid finding, duplicate. Triage confirmed.

Valid

Superteam Earn Grant

Agentic Engineering Grant - $200 USDG for Solana expansion of web3-agent-kit (50% landed, Tranche 1).

$100 USDG
Submitted

MultiHopper

CORS wildcard + Fastify info leak on agentic flow platform.

Pending
Writing

Notes and public work.

Jul 2026

Hey, I'm Khaa.

Substack - intro post, why I hunt bugs and what this newsletter is about.

 Jul 2026

I Built a Web3 Agent Kit

Substack - 24 modules, 1,149+ tests, lessons from building open source.

 Jun 2026

5 Lessons from 20+ Web3 Bots

LinkedIn - production bot farming experience.

 Jun 2026

Solana Security Audit Skill

GitHub - comprehensive audit methodology with 8 categories.
Subscribe to Newsletter
Contact

Let us build something solid.

Open for freelance Web3 architecture, security audits, and agentic automation work.

Send email Telegram