Technical due diligence, smart contract reviews, and ongoing security advisory. Clear findings for the teams building protocols and the firms putting capital to work.
Through Ginger Security and private engagements.
Keyrock
eOracle
Starkswap
Argent
Braavos
Revelator
Coinbase
Kraken
Robinhood
Red Hat
Uniswap
Aave
Ethereum Foundation
OpenZeppelin
Hacken
Chainlink Labs
Tenderly
Llama
Forbole
Fyde
Linum Labs
Metlabs
Black Owl Security
Limpid Security
Offchain Security
Xpose Security
RektifySmart contract reviews and security work.
Explore Ginger SecurityBefore you commit capital or integrate a protocol, I review its deployment, audit scope, dependencies and privileged controls. You receive a technical diligence memo with findings and open questions.
Explore DeFi due diligenceGet reserved monthly security capacity for architecture, integrations and protocol changes, with written analysis and follow-up as your systems evolve.
Explore ongoing advisoryBefore release, I review your codebase, integration or upgrade, document findings and review agreed fixes with your developers.
Explore security reviewsI’m Jonathan Shahak, known as JohnnyTime: founder and Lead Security Engineer at Ginger Security, and creator of Smart Contract Hacking (SCH). I bring together smart contract analysis, DeFi experience, and practical security education.
I lead the review and walk your team through the findings.
Start a conversationAgree on the system, intended interaction, review depth, and timeline before work begins.
Examine the code and assumptions within scope. Investigate failure paths and document what I find.
Walk through the conclusions, unresolved questions, and agreed next steps directly with your team.
"Working with Ginger Security was a true pleasure. As one of the only auditors native to StarkNet, they brought unparalleled knowledge and expertise. Their thorough understanding allowed them to uncover potential vulnerabilities, ensuring Starkswap was fully prepared for launch. Highly recommend Ginger Security for top-notch security audits."
"What a game-changer! I just completed Part 1 of Johnny's Smart Contract Hacking Course. Over 20 hours of video and hands-on coding exercises. As someone just starting into Solidity Security, I found the course to be a godsend. The hands-on approach is fantastic – detailed code walk-throughs and real-world testing with Hardhat. Highly recommend!"
"Bunch of new users today from the video – we got 42 users and counting! Usage was so good this week that our servers went down for a bit, which in my view is amazing. Thank you again for the fantastic work!"
Smart contract audits and security reviews for DeFi protocols.
Audit experience with Keyrock, eOracle, Starkswap, Braavos and Argent.
Explore Ginger Security
Hands-on security courses and CTFs. A community of 1,500+ members.
Visit the academyCTF walkthroughs, security tools and researcher interviews for 30,000+ subscribers.
Watch the channelPractical training in the analysis and techniques behind smart contract security.
Learn smart contract auditing through code reviews, vulnerability analysis and hands‑on exercises.
Learn Cairo and Starknet security through contract analysis and practical hacking exercises.
Companies represented by Smart Contract Hacking students.
Logos identify students’ employers; they do not imply company endorsement.
Smart contract research, DeFi risk analysis and practical security reviews.
Share your system, review goals and target timeline.
