Skip to content
View dgoni97's full-sized avatar

Block or report dgoni97

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
dgoni97/README.md

August

AI-augmented systems builder. I design systems and build them end to end, using AI as my execution layer so one person delivers what usually takes a small team. I own the fundamentals (Python, systems design, debugging); AI speeds up delivery, it does not replace the thinking.

Give me a fuzzy goal and I turn it into a real architecture and working, deployed software with tests, monitoring, and safe-rollout machinery. I ramp on a new domain or API in days, work fully remote, async, and text-first.

What I build

  • Automation & backends: bots, scrapers, data pipelines, AI agents, lightweight HTTP services, dashboards, SQLite-backed state, systemd deployment.
  • Trading & data systems: probabilistic modeling, calibration against real outcomes, backtesting, drift monitoring, champion/challenger rollouts.
  • Web3 security research: attacker-style review of smart contracts, access-control and trust-architecture flaws, proof-of-concept validation. 17 valid findings on CodeHawks First Flights, each with an exploit that runs. Human-directed, AI-augmented: I set the hypotheses, read the code, and validate every finding.

Featured projects

scout-osint A single-operator OSINT and research aggregation agent. Give it a domain, company, username, email, or topic and it collects public information through 17 collectors, correlates identifiers into a confidence-scored entity graph, has an LLM write a structured report, and serves it on a local dashboard. About 16,300 lines of Python across 115 commits, with 733 tests and all network mocked. Standard-library first, SQLite encrypted at rest, prompt-injection isolation in the synthesis layer, and a written spec with hard ethics constraints: public data only.

codehawks-findings Selected smart-contract security findings from CodeHawks First Flights, published as full write-ups with runnable Foundry and Anchor proof-of-concept exploits. 17 valid findings overall (8 High, 7 Medium, 2 Low) across three contests; the six published here were picked to span distinct vulnerability classes rather than to pad a count. Profile: profiles.cyfrin.io/u/augustwh11.

weather-prediction-market-bot An automated Polymarket trading system, about 32,000 lines of Python built solo across 54 commits. Forecasts station-level temperature from multiple meteorological models, builds calibrated probability distributions over market bins, and enters positions with positive expected value. Engineered for safe operation: champion/challenger, shadow runtime, dual-write, gates, drift monitoring, systemd deployment, rollback runbooks, and a 1,100+ line test suite. Runs in paper mode by design, as an engineering and research project.

postmortem-key-compromise-collateral-trust A security post-mortem of an admin-key compromise on the Echo protocol (Monad): unauthorized mint and chained exploitation through lending protocols, with a trust-architecture checklist (single EOA mint authority, missing timelock, and more).

technique-eth-call-state-override A write-up on using the eth_call state override to binary-search threshold values inside contracts without sending any on-chain transactions.

Skills

Area Details
Languages Python (stdlib-first: urllib, sqlite3, http.server, asyncio, dataclasses), SQL, HTML/CSS/JavaScript
Automation bots, web scraping, data collection, API integration, scheduled jobs, task pipelines
AI AI agents, LLM integration, prompt design, AI content generation (video, audio)
Data probabilistic modeling, calibration, backtesting, data pipelines
Backend & ops REST APIs, SQLite, dashboards, systemd, monitoring, backup and rollback, safe rollouts
Web3 EVM chains, Solidity (reading and analysis), DeFi mechanics, on-chain data, smart-contract security research

Now

17 valid findings on CodeHawks First Flights so far; next up is live competitive audits, where findings are ranked against production protocols. Also taking on remote automation, backend, and OSINT/research-tooling work. Advanced hands-on crypto user since 2017.

Pinned Loading

  1. postmortem-key-compromise-collateral-trust postmortem-key-compromise-collateral-trust Public

    Post-mortem: admin-key compromise and chained cross-protocol collateral exploitation on the Echo protocol (Monad).

    1

  2. technique-eth-call-state-override technique-eth-call-state-override Public

    Technique: eth_call state override to binary-search contract threshold values without sending on-chain transactions.

    1

  3. weather-prediction-market-bot weather-prediction-market-bot Public

    Automated Polymarket weather-market trading system: multi-model probabilistic engine, per-station calibration, champion/challenger and shadow-runtime infra. Paper mode, engineering showcase.

    Python 1

  4. sports-copytrade-case-study sports-copytrade-case-study Public

    System design case study of a private Polymarket sports copytrading bot: architecture and paper results (ROI +368%), no source code.

    1

  5. scout-osint scout-osint Public

    Single-operator OSINT and research aggregation agent: pluggable collectors, a confidence-scored entity-resolution graph, LLM report synthesis with prompt-injection isolation, and an encrypted local…

    Python 1

  6. codehawks-findings codehawks-findings Public

    Selected smart-contract security findings from CodeHawks First Flights: six High-severity write-ups with runnable Foundry/Anchor proof-of-concept exploits