Independent security research
A research workflow for turning suspected vulnerabilities into reproducible evidence—or discarding them when the evidence does not hold.
Research position
The method begins with a system invariant rather than an automated scanner result. A finding survives only when controlled testing shows a repeatable violation and the report explains both impact and remediation.
This work includes local tooling, audit notes, proof-of-concept tests and remediation reports across web APIs and smart-contract or consensus review exercises.
Validation sequence
State the security property that must always hold—ownership, authorization, accounting, contract state or consensus correctness.
Change one relevant variable at a time and retain a valid baseline for comparison.
Reject findings that cannot be reproduced or whose observed difference does not violate the invariant.
Use a focused test, code-level demonstration or structured request comparison that another reviewer can inspect.
Explain the missing control and propose a bounded fix without overstating business impact.
Artifacts in the private research archive
Radbit can review authorization boundaries, data handling and workflow risks as part of application architecture. This is scoped separately from certified penetration testing.
Discuss the system boundary