Solidity Engineer · Web3 Developer · Remote, UTC+5
Solidity and Web3 developer shipping gas-conscious EVM contracts and the React/ethers front-ends that make them usable. I designed and shipped a counterfeit-product-detection system on Ethereum (smart contracts + encrypted QR verification) and build NFT marketplaces end to end. Panaverse-certified, grounded in real crypto-market experience.
About
As of 2026 I’m a Solidity and Web3 developer focused on security-first smart contracts. I came to Web3 from an Electrical & Electronics Engineering degree at FAST-NUCES and several years of full-stack delivery, then earned the Web 3.0 & Metaverse Developer certification at Panaverse (2022–2023) and advised on crypto markets as a consultant for IR Trades in the UK (Dec 2021–Aug 2023). My flagship is real and shipped, not a tutorial fork: an Ethereum-based counterfeit-product-detection platform combining on-chain provenance, smart contracts and encrypted QR verification so buyers can authenticate physical goods on-chain. I write OpenZeppelin-based ERC-20/721/1155 contracts with an attacker’s mindset, test them with Foundry, optimize gas, then wire them to clean ethers/viem/wagmi front ends. Web3 rewards public proof, so I’m publishing testnet/L2 deployments and security CTF writeups. I’m remote from Pakistan (UTC+5) with 4–6 hours of Gulf overlap.
Flagship · shipped
A real, shipped supply-chain authentication platform pairing Ethereum smart contracts with encrypted QR verification. Gas-conscious Solidity, on-chain provenance, buyer-side verification.
Shipped · flagship (delivered via Apex)Registers each product to a smart contract — immutable on-chain provenance.
Stores product identity and ownership/authenticity records on Ethereum.
Each unit gets an encrypted QR code linked to its on-chain record.
Scans and verifies authenticity directly against the chain — counterfeits become detectable.
Capabilities
Work
Every card is labelled by its true state — shipped, in progress, or planned. No invented metrics.
Flagship real build (via Apex): on-chain product provenance + encrypted QR so buyers verify authenticity against Ethereum.
End-to-end NFT marketplaces (via Apex): minting, listing, buying/selling, royalties and wallet connection — contract layer and dApp front-end built together.
In-progress public demo: an ERC-4626 tokenized-vault dApp on an L2 testnet with a full Foundry suite (unit, fuzz, invariant) and verified contracts. Not yet on mainnet.
Planned open-source extension of the counterfeit-detection concept: a testnet provenance tracker with a subgraph-powered query UI.
Security & on-chain proof
In Web3, proof is public. I’m publishing on-chain deployments and security writeups so the work is inspectable, not just claimed. Threat-model focus: reentrancy, access control, integer/overflow, oracle/price manipulation, gas-griefing.
Solving and documenting the OpenZeppelin Ethernaut challenges.
Working through DeFi exploit scenarios with Foundry.
Verified contracts on a block explorer (mainnet pending).
Experience
Real-time 6-DOF FTD software in C++/Rust/Lua; SimConnect, motion platforms, avionics, Varjo XR, telemetry.
Led MERN/Next.js delivery for international clients; AWS, Docker, Kubernetes, CI/CD; mentored the team.
Responsive sites, e-commerce stores and NFT marketplaces; GA4/Tag Manager; technical SEO & Core Web Vitals.
Market guidance, consulting and account management — crypto-market domain depth alongside development.
Remote support and development for UK clients; issue diagnosis, fixes, SQL upkeep, deployments.
Process
Define behavior and the attack surface before writing code.
OpenZeppelin building blocks, minimal surface, clear access control.
Unit, fuzz and invariant tests against the spec.
Profile and optimize storage layout and hot paths.
Ship to testnet/L2 and verify the contracts on the explorer.
FAQ
Yes — it’s a shipped build delivered via Apex: Ethereum smart contracts plus encrypted QR verification for supply-chain authentication.
I build security-first (threat modeling, Foundry fuzz/invariant tests, OpenZeppelin patterns) and practice on Ethernaut and Damn Vulnerable DeFi. Formal audit writeups are in progress.
EVM chains — Ethereum mainnet and testnets, plus Arbitrum, Optimism and Base for L2.
Yes — based in Pakistan (UTC+5) with 4–6 hours of daily overlap with Gulf and Malaysian business hours; contract and EOR friendly.
Contact
Remote / EOR-friendly · 4–6h overlap with GST & MYT · Islamabad–Rawalpindi, Pakistan (UTC+5).