Jason Suárez - Security Research Portfolio

Smart Contract Security Research & Learning Journey

Documenting my growth and contributions to blockchain security

About This Repository

Welcome to my security research portfolio. This repository documents my learning journey in smart contract security, containing practice assessments, security research, and educational resources I've created while developing my skills in blockchain security.

I'm currently building expertise in smart contract auditing through systematic study, practice assessments, and participation in audit contests. This repository serves as both a learning log and a demonstration of my growing capabilities.

Note

I'm actively learning and improving my security assessment skills. The assessments here represent my current understanding and approach to security analysis. I welcome feedback and collaboration opportunities!

Connect with me:

• 🐦 Twitter: @swarecito
• 💼 LinkedIn: Jason Suárez

Learning Focus

• 🔎 Smart Contract Vulnerability Analysis - Identifying and understanding common vulnerabilities in EVM contracts
• 📚 Security Best Practices - Researching and implementing industry standards for secure contract development
• 🛠️ Audit Methodology Development - Building a systematic approach to security assessments
• 🧪 Testing Techniques - Exploring effective verification methods for security properties

Assessment Portfolio

Project	Type	Date	Purpose	Report
InheritableSmartContractWallet	Practice Assessment	March 2025	Learning exercise	Report
PasswordStore	Practice Review	March 2025	Skill development	Report

My Approach

As I develop my security assessment skills, I'm building a methodical process:

1. Understanding the Code - Taking time to thoroughly comprehend protocol functionality and design intent
2. Static Analysis - Using automated tools to identify potential vulnerabilities
3. Manual Code Review - Systematically reviewing code for security issues
4. Verification - Testing findings with proof-of-concept examples when possible
5. Clear Documentation - Practicing clear, actionable security reporting

Repository Structure

.
├── README.md                      # Overview and introduction
├── assets/                        # Logos and visual resources
├── docs/                          # Documentation and resources
│   ├── client-preparation/        # Preparation materials for assessments
│   ├── process/                   # Methodology notes and checklists
│   └── simple-security-toolkit/   # Security tools and references
├── reviews/                       # Practice security assessments
│   ├── YEAR-MONTH-DAY-PROJECT/    # Organized by date and project
│   │   └── REPORT.pdf             # Assessment reports
└── templates/                     # Templates I use for consistency

Getting Started

To explore this repository:

git clone https://github.com/All-Khwarizmi/security-reviews.git
cd security-reviews

Learning Resources

These are some valuable resources I've found helpful in my security learning journey:

• Secureum Bootcamp
• Code4rena Docs
• Smart Contract Security Verification Standard
• Solidity Patterns
• DeFi Hack Analysis

Future Goals

As I continue to develop my skills, I plan to:

• Participate in more audit contests and bug bounties
• Contribute to open-source security tools
• Develop specialized expertise in specific protocol types
• Build a collection of comprehensive security research articles

Acknowledgments

I'm grateful to the security community for sharing knowledge and creating opportunities for newcomers to learn. Special thanks to platforms like CodeHawks, Code4rena, and Secureum for making security education more accessible.

---

Learning, growing, and contributing to blockchain security one assessment at a time