ARC Security Research

I reproduce one bounded bug in a public JavaScript, TypeScript, Python, Solidity, or Clarity project and deliver a private Markdown diagnosis with exact evidence, root cause, a minimal remediation plan, and verification steps. No credentials, production access, or live-fund testing.

I review a public Solidity/Clarity/Rust smart-contract repository, reproduce security findings offline where possible, and deliver a concise private Markdown report with impact, exact affected code paths, deterministic reproduction steps, and prioritized remediation guidance. No live-fund testing.