Technical due diligence, smart contract reviews, and ongoing security advisory. Clear findings for the teams building protocols and the firms putting capital to work.
Through Ginger Security and private engagements.
Keyrock
eOracle
Starkswap
Argent
Braavos
Revelator
Coinbase
Kraken
Robinhood
Red Hat
Uniswap
Aave
Ethereum Foundation
OpenZeppelin
Hacken
Chainlink Labs
Tenderly
Llama
Forbole
Fyde
Linum Labs
Metlabs
Black Owl Security
Limpid Security
Offchain Security
Xpose Security
RektifySmart contract reviews and security work.
Explore Ginger SecurityUnderstand the system before committing capital or integrating a protocol. I examine the contracts, dependencies, and privileged controls, then document the findings and open questions.
Keep senior security input close as your systems change. Reserved capacity for architecture, integrations, protocol changes, and follow-up, with clear priorities and response expectations.
Challenge a defined codebase, integration, or upgrade before release. I investigate failure paths, document actionable findings, and review agreed fixes with your developers.
I’m Jonathan Shahak, known as JohnnyTime: founder and Lead Security Engineer at Ginger Security, and creator of Smart Contract Hacking (SCH). I bring together smart contract analysis, DeFi experience, and practical security education.
I lead the review and walk your team through the findings.
Start a conversationAgree on the system, intended interaction, review depth, and timeline before work begins.
Examine the code and assumptions within scope. Investigate failure paths and document the evidence.
Walk through the conclusions, unresolved questions, and agreed next steps directly with your team.
"Working with Ginger Security was a true pleasure. As one of the only auditors native to StarkNet, they brought unparalleled knowledge and expertise. Their thorough understanding allowed them to uncover potential vulnerabilities, ensuring Starkswap was fully prepared for launch. Highly recommend Ginger Security for top-notch security audits."
"What a game-changer! I just completed Part 1 of Johnny's Smart Contract Hacking Course. Over 20 hours of video and hands-on coding exercises. As someone just starting into Solidity Security, I found the course to be a godsend. The hands-on approach is fantastic – detailed code walk-throughs and real-world testing with Hardhat. Highly recommend!"
"Bunch of new users today from the video – we got 42 users and counting! Usage was so good this week that our servers went down for a bit, which in my view is amazing. Thank you again for the fantastic work!"
Smart contract audits and security reviews for DeFi protocols.
Audit experience with Keyrock, eOracle, Starkswap, Braavos and Argent.
Explore Ginger Security
Hands-on security courses and CTFs. A community of 1,500+ members.
Visit the academyCTF walkthroughs, security tools and researcher interviews for 30,000+ subscribers.
Watch the channelPractical training in the analysis and techniques behind smart contract security.
Learn smart contract auditing through code reviews, vulnerability analysis and hands-on exercises.
Learn Cairo and Starknet security through contract analysis and practical hacking exercises.
Companies represented by Smart Contract Hacking students.
Logos identify students’ employers; they do not imply company endorsement.
Short reads on crypto products, security, tools, and practical Web3 decisions.
Research notes, practical tools, and observations from the field.
Share your system, review goals and target timeline.
