
Patched critical TOCTOU race conditions and unauthenticated booking exploits, preventing credit-line drain and unauthorized transactions.
Identified and mitigated BOLA/IDOR vulnerabilities, protecting sensitive customer PII and partner gift card credentials (Amazon & Domino's).
Architected thread-safe RS256 JWT caching in Go for SuperCoins integration, slashing server-to-server (S2S) API latency by 70%.
Engineered v3 canonical request signing to eliminate client-side hashing bottlenecks and tuned PostgreSQL connection pooling for concurrent traffic spikes.

Engineered backend services for an international payment processing system handling 10,000+ active users across multiple geographies.
Implemented financial ledger logic handling multi-currency payouts, automatic refunds, chargebacks, settlements, and negative balance protections.
Built a unified dispute and refund abstraction layer bridging disparate payment gateways (Razorpay and xPay).
Integrated Customer.io webhooks and events for mission-critical transactional emails and real-time payment status updates.

Designed and deployed automated GitHub Actions CI/CD release pipelines targeting Debian (DEB), Red Hat (RPM), and Docker distribution formats.
Modularized packaging workflows for the Host Agent and OpenTelemetry Collector daemon.
Integrated Pulp repository management for tamper-proof binary publishing and version control.

Developed performant RESTful APIs using Django REST framework and PostgreSQL, supporting seamless relational data access.
Deployed and maintained server-side applications on AWS Elastic Beanstalk using Gunicorn WSGI and NGINX reverse proxying.

A 24/7 high-throughput crypto market scanner in Go utilizing a worker-pool architecture to ingest and analyze tick data across 400+ pairs in parallel.
• Worker pools with sync.Mutex locks to ensure zero race conditions across high-frequency market streams.
• Containerized with Docker and deployed on cloud VM instances for continuous 99.9% uptime.
• Dispatches real-time entry/exit alerts to private Telegram and Pushover channels with sub-second execution.

A decentralized platform empowering educational institutions to issue cryptographically signed, fraud-proof academic credentials as ERC-721 tokens.
• Engineered custom Go middleware with go-ethereum for transaction management, on-chain minting, and proof verification.
• Leveraged IPFS decentralized storage and content hashing to ensure immutability and permanent availability of certificate assets.
• Streamlined institutional onboarding and instant verification for recruiters without requiring blockchain knowledge.

A high-speed Firefox browser extension that classifies web browsing activity in real time to filter distractions without degrading browser performance.

An algorithm that encodes binary data (images, files) into chess moves by mapping bit states to destination square colors, played out automatically via Lichess bots.
• Bit-to-move mapping algorithm translating binary streams into valid legal chess moves.
• Automated bot-vs-bot games executed through Lichess API and serialized as PGN records.
• Deterministic decoder reconstructing original binary files with zero loss.