0xSimao
Smart contract audits
86 private audits for teams including Morpho, Maple Finance, Usual and Babylon. Sherlock's 2025 Watson of the Year and founding member of Blackthorn.
Goes straight to 0xSimao. No form, no intake queue.I've had the pleasure to work with Simao over the last few years where he has completed numerous audits for Maple Finance. Each time he's been thorough, finding niche issues missed in prior audits and helping us improve the design and security of the system. I would highly recommend him to audit any protocol.
FarhaanTech Lead, Smart Contracts, Maple
8 reviews since 2023 · Read the case study
Recent report
3 Crit/High
1 Medium
3 Low/Info
Track Record
Competitions, private engagements and firm leadership.
30 top-3 finishes
Public audit competitions, where researchers compete to surface vulnerabilities. $627K in prizes across 57 competitions.
86 private audits
Private security reviews spanning lending, stablecoins, perpetuals, restaking and cross-chain infrastructure.
2025 Watson of the Year
Sherlock's award for the researcher with the greatest impact on the platform in 2025. Read Sherlock's announcement
Founding member of Blackthorn
One of the founding members of Blackthorn, an audit firm formed from established Web3 security professionals.
Former Head of Security, Three Sigma
Ran the security department and led more than 31 audits.
Top-ranked on Code4rena
Placed in the top 3 over a 90-day period on Code4rena.
Top-ranked on Cantina
3 top-3 finishes across 6 Cantina competitions. Profile
53 solo findings
Vulnerabilities no other researcher submitted, including in competitions with 600+ participants.
866 published findings
Every finding published, from the competitions entered and the reviews worked on. Findings database
Audit Process
Fast, transparent and effective, including a fix-verification pass most reviews skip.
Quick Quote
Contact me anytime; I’ll deliver an accurate quote in minutes, thanks to my deep expertise.
Security Review
I’ll set up a dedicated GitHub repository and a real-time chat channel to share findings instantly. The review process will be manual with AI assistance, and I’ll create tests as needed.
Fix Verification
I’ll thoroughly review your implemented fixes and all related code changes to confirm every issue is fully resolved and no new bugs are introduced.
Final Report
You’ll receive a professionally formatted report including all the findings and corresponding fixes.
Testimonials
From 8 protocols whose code went through this process.
I've had the pleasure to work with Simao over the last few years where he has completed numerous audits for Maple Finance. Each time he's been thorough, finding niche issues missed in prior audits and helping us improve the design and security of the system.
Maple0xSimao is an absolute pro who really went above and beyond during our audit. It can be hard to find auditors like Simao who have such a high degree of integrity that they are willing to spend time verifying reported issues have been addressed correctly. Others just move on to the next project, but Simao was with us every step of the way.
NeriteHe identified one third of the verified issues in a 6.2k SLOC codebase, a testament to his thoroughness and auditing skills. Additionally, his contributions during the fix review process were instrumental in uncovering further issues.
BeraborrowHe quickly demonstrated a total understanding of the protocol, its goal and mechanics. All of the final 3 High and 3 Medium severity issues raised during the audit were discovered by 0xSimao. Finally, 0xSimao’s reactivity and advice were very appreciated during the fix review process.
SuperfluidWe had the opportunity to work with 0xSimao as the Lead Senior Watson for the Mento x Good$ Integration audit. He identified multiple issues with exceptional thoroughness and ensured that each one was properly addressed and mitigated.
Mento0xSimao, during his audit with PoolTogether, was the sole auditor to discover a complex, high-severity issue that demonstrated his experience and deep understanding of the codebase. His thorough review was instrumental in ensuring the security and longevity of the core protocol.
PoolTogetherHe completely understood how the codebase works and uncovered 52% of the confirmed issues, a clear indication of his exceptional eye for detail and robust auditing capability. His proactive role in the remediation review further brought additional issues to light.
AutonomintHe demonstrated deep knowledge of the underlying stack (Uniswap v4), discovered most of the high-level issues raised, and had great communication with us every step of the way. We would highly recommend him to audit a protocol and look forward to collaborating further on our protocol’s security in the future.
BMXCommunity Notes
Unsolicited feedback from the Web3 security community.
Really excited to see 0xSimao joining Blackthorn as the 10th founding member. He proved it's still possible to crack the top 5 on Sherlock's leaderboard in this day and age, achieving it a few days ago. And he's a really nice guy.
Jack SanfordWhat a legend! Thank you for sharing and it was our pleasure to be part of your journey. You are really one of the greats in the space. GG well played sir.
Three Sigma0xSimao is a beast, I really like his kind of findings, excelling at identifying tricky numerical corner cases. Sometimes I wonder if he's actually a human fuzzer. You should definitely check him on Solodit and take notes.
InfectedCryptoGiga-Senior SRs who can make $30k+/week all have something unusual you can't copy (@zachobront, @deadrosesxyz, @0xSimao, @lonelysloth_sec, etc) (...)
MackenzieReady to secure your protocol?
Send the repo and scope for a quote within minutes.