Looking for a job

Alham Akhyar

@alhamakhyar

Message

Smart contract auditor at Sherlock contests who found a price-manipulation flaw and proved it with a Foundry PoC.

Malaysia

Message

What I'm looking for

I’m interested in oracle and market-data trust as core DeFi infrastructure, and I’m remote-ready and comfortable working across time zones.

At Sherlock Contests, I found a structural flaw in Metric Protocol’s price-manipulation circuit breakers and ranked #29 globally with a Medium-severity finding. I used Forge/Foundry to demonstrate how rapid transaction sequencing could bypass trading caps.

I’m also conducting ongoing vulnerability research through Web3 security contests, including work on the Tare and Darts protocols.

As an independent Threat & Infrastructure Analyst, I tested commercial web infrastructure and identified an exposed REST API leaking marketing data and an active legacy XML-RPC gateway. I provided remediation guidelines for stricter API access controls.

My work has also included an OSINT investigation into a suspected fraudulent server-to-server transaction; my report led to the transaction being halted. Earlier, I built a Discord community with an NFT-gated DAO for $FURBY and ran engagement campaigns for Solana project launches.

Experience

Work history, roles, and key accomplishments

Current

Co-Founder & Technical Lead

Current

Feast 2.0 Startup Innovation Convention

Aug 2026 - Present (2 months)

Co-developed an automated honey extraction mechanism designed to reduce manual harvesting bottlenecks and mitigate yield contamination.

Hardware Automation Product Development Technical Leadership

Current

Competitive Smart Contract Auditor

Current

Sherlock Contests

Jul 2026 - Present (3 months)

Ranked #29 globally for a Medium-severity finding in Metric Protocol audit, identifying a structural logic flaw in price-manipulation circuit breakers. Developed PoCs using Foundry to demonstrate bypass of trading caps and actively participates in ongoing Web3 security contests.

Smart Contract Security Vulnerability Research Price Manipulation Analysis Invariant Testing PoC Development Foundry Solidity EVM Architecture

Current

President

Current

Agropreneur Club (AGROSIS), UPNM

Dec 2025 - Present (10 months)

Secured ~RM6,000 in direct operational funding through negotiations with the Ministry of Plantation and Commodities and corporate partners.

Funding Negotiation Operations Leadership

Current

Threat & Infrastructure Analyst

Current

Independent

Aug 2025 - Present (1 year 2 months)

Executed production penetration testing for commercial infrastructure, identifying exposed REST API and legacy XML-RPC gateway, and delivered remediation guidelines. Conducted forensic OSINT investigation that led to halting a multi-million dollar fraudulent transaction.

Penetration Testing OSINT Vulnerability Research REST APIs XML RPC Security Analysis

Launch & Community Operations

$999

Sep 2024 - Sep 2024 (0 months)

Partnered with livefree999 to run merch giveaways for top holders and active community members of a Solana community project.

Community Management Solana Giveaways Holder Engagement

Launch & Community Operations

$FURBY

Aug 2024 - Aug 2024 (0 months)

Built a Discord community with an NFT-gated DAO and ran member engagement campaigns for a Solana community project, reaching ~USD 1M peak market cap.

Community Management Discord DAO Solana Campaign Engagement

Education

Degrees, certifications, and relevant coursework

National Defence University of Malaysia (UPNM / NDUM)

B.Sc. (Hons), Computer Science

Grade: CGPA: 3.52 / 4.00

Activities and societies: Dean's List; Core coursework includes Systems Architecture, Machine Learning, Data Structures, Applied Statistics & Optimization.

Pursuing a B.Sc. (Hons) in Computer Science with a focus on Artificial Intelligence, expected to graduate in 2028. Currently holds a CGPA of 3.52/4.00 and has been named to the Dean's List.