I'm Isah
{
"handle": "trinnex",
"focus": "security · web3 · cryptography",
"status": "available"
}
About Me
Security practitioner specializing in smart contract auditing, penetration testing, and Web3 protocol development.
Security practitioner with a focus on smart contract auditing, web application penetration testing, and blockchain protocol development. Certified in application security, network security, and threat intelligence.
Full-stack Web3 architecture background means I audit from the engineer's perspective-surfacing logic-level and architectural vulnerabilities that automated tools miss.
Certified AppSec Practitioner (CAP)
The SecOps Group-2024
Certified Network Security Practitioner (CNSP)
The SecOps Group-2024
Certified Cyber Security Analyst (CS3A)
CyberWarfare Labs-2023
Certified Cyber Threat Intelligence Analyst (CTI 101)
TCM Security-2024
Student Intern: Web3 Development / Security
Web3Bridge
Jul 2025: Oct 2025
Completed a structured Web3 development and security internship covering smart contract development, protocol design patterns, and blockchain security fundamentals.
Cybersecurity Student Intern
CFSS: Cyber and Forensics Security Solutions
Nov 2023: Dec 2023
Completed an intensive cybersecurity and ethical hacking internship covering penetration testing methodology, information gathering techniques, and vulnerability mitigation strategies. Worked through hands-on digital infrastructure security scenarios.
Volunteer: Cybersecurity Awareness Campaign
Cybersecurity Education Initiative (CYSED)
Oct 2023
Participated in a public cybersecurity awareness campaign, communicating digital safety practices and threat awareness to non-technical audiences in the Minna community.
Open Source
Security tools, SDKs, and protocols I've built and contributed to.
Security Portfolio
Smart contract audits, security tools, and Web3 protocol development.
Bug Bounty Hunting: Cantina, YesWeHack, Bugcrowd
Active bug bounty hunter across three major platforms covering both Web2 and Web3 targets. Cantina focuses on smart contract and DeFi protocol security reviews. YesWeHack and Bugcrowd engagements cover web application and API security testing across diverse programme scopes.
Sherlock Audit: XRP Ledger C++
Participated in a competitive public audit covering five live protocol amendments: Batch Transactions, Permission Delegation, MPT DEX, Confidential Transfers, and Sponsored Fees. Reviewed amendment interaction logic and delegation boundary enforcement.
VERIDAQ: ZK Credential Protocol
Designed and shipped a full-stack ZK credential system using Circom circuits, five Solidity contracts, a Fastify API, and a Next.js frontend deployed on Base Sepolia. Security focus included circuit constraint integrity and proof soundness against witness manipulation.
ProofArena: On-Chain Bug Bounty
Developed a three-layer bug bounty platform on Initia with Solidity contracts, a TypeScript AI triage agent, and a React interface with trustless payout flow.
SealBid: FHE Sealed-Bid Auction
Built a sealed-bid auction protocol on Fhenix using CoFHE encrypted integer types. Eliminates front-running by keeping bid values encrypted throughout the auction lifecycle.
Glider Query Contest: r.xyz
Authored semantic static analysis queries targeting ERC-2771 context spoofing through delegatecall, multicall vulnerability patterns, and unmasked calldata address flows.
Judgement Day: AI Red Teaming
Produced adversarial attack artifacts across AI triage and suppression scenario tracks for the AIM Intelligence and Korea AI Safety Institute red-teaming competition.
Evil Twin Detection IDS
Developed a passive wireless intrusion detection system in Python using Scapy that identifies evil twin access points through RSSI fingerprinting and MAC anomaly correlation.
Bug Bounty Hunting: Cantina, YesWeHack, Bugcrowd
Active bug bounty hunter across three major platforms covering both Web2 and Web3 targets. Cantina focuses on smart contract and DeFi protocol security reviews. YesWeHack and Bugcrowd engagements cover web application and API security testing across diverse programme scopes.
Sherlock Audit: XRP Ledger C++
Participated in a competitive public audit covering five live protocol amendments: Batch Transactions, Permission Delegation, MPT DEX, Confidential Transfers, and Sponsored Fees. Reviewed amendment interaction logic and delegation boundary enforcement.
VERIDAQ: ZK Credential Protocol
Designed and shipped a full-stack ZK credential system using Circom circuits, five Solidity contracts, a Fastify API, and a Next.js frontend deployed on Base Sepolia. Security focus included circuit constraint integrity and proof soundness against witness manipulation.
ProofArena: On-Chain Bug Bounty
Developed a three-layer bug bounty platform on Initia with Solidity contracts, a TypeScript AI triage agent, and a React interface with trustless payout flow.
SealBid: FHE Sealed-Bid Auction
Built a sealed-bid auction protocol on Fhenix using CoFHE encrypted integer types. Eliminates front-running by keeping bid values encrypted throughout the auction lifecycle.
Glider Query Contest: r.xyz
Authored semantic static analysis queries targeting ERC-2771 context spoofing through delegatecall, multicall vulnerability patterns, and unmasked calldata address flows.
Judgement Day: AI Red Teaming
Produced adversarial attack artifacts across AI triage and suppression scenario tracks for the AIM Intelligence and Korea AI Safety Institute red-teaming competition.
Evil Twin Detection IDS
Developed a passive wireless intrusion detection system in Python using Scapy that identifies evil twin access points through RSSI fingerprinting and MAC anomaly correlation.
Get In Touch
Have an audit, project, or security engagement? Let's talk.
Phone
+234 810 380 0607
PGP key available on request. Signal and ProtonMail preferred for sensitive discussions.