Candidate Profile

I aim to make DAO governance secure. With my company, I have developed a risk assessment framework, along with tools and a monitoring system, to better understand and contribute to the ecosystem, thereby reducing the risk of attacks and governance vulnerabilities in decentralized organizations.

By joining the Security Council, I bring both a governance-first perspective and hands-on technical experience. This dual expertise positions me to support the council in safeguarding Arbitrum’s infrastructure, DAO, and community.

Recently, I led the technical process that helped secure the governance of Shutter, a DAO whose governance was vulnerable and could have lost $3M if me and my team had not identified the issues and proposed solutions to its members. Read the full case here: https://paragraph.com/@blockful/shutter-attack-prevention

Shutter is not the first DAO where I have worked to identify vulnerabilities and propose ways to protect its governance. It all started with ENS, where I uncovered a potential attack that could have drained its entire treasury, valued at over $150M. As a result, I proposed the implementation of a Security Council at ENS to protect it from future threats: https://paragraph.com/@research.blockful/a-hidden-threat-to-ens-uncovering-and-solving-a-major-governance-risk

Building on this experience, I also led my team when we assessed the security of Uniswap governance, where blockful received a grant to develop the Anticapture framework — our DAO security product — and implement it within Uniswap: https://uniswapfoundation.mirror.xyz/SAPBIdMcJpo\_gUUyHdMNuH8r7qpCqRtxFbDrui7Na-I

Beyond these cases, I have studied vulnerabilities across other DAOs in the ecosystem, aiming to deepen the understanding of governance and contribute to a more secure market. Compound is one such example, where I led the technical exploration and later published two research pieces on attempted attacks against the organization:

• First attempt involved Humpy — a well-known DAO attacker — trying to pass a proposal to use Compound’s treasury for personal benefit: https://paragraph.com/@research.blockful/anatomy-and-antidote-for-compound-war
• Second attempt involved the Compound Foundation proposing a set of measures to protect the DAO’s governance, during which we identified Humpy moving addresses to potentially block the proposals: https://x.com/blockful_io/status/2023530187221332393

None of the attacks on Compound were successful.

Additionally, risks have been assessed and analyses published on other DAOs such as Scroll, Nouns, and Gitcoin: https://anticapture.com/

ENS, Uniswap. I participate on Scroll governance but do not have any service provider relation, so no conflict of interest. In our treasury we hold around ~5% of L2 tokens: ARB, OP, SCR.