Live Bounty Tracker: Open Simple Live Submissions & Wallet Dashboard →
Aurelis

Independent engineer · New Zealand

Bugs found, fixed and proven with a test.

I fix broken code, review smart contracts and work on compilers. You pay a fixed price and get a pull request with a regression test, not a vague report.

See prices Read the public work aurelis.work@gmail.com

How it works

No sales call and no proposal documents.

  1. Pick a package

    Choose the size that fits the problem and pay by card through Stripe.

  2. Send the details

    After paying, I'll get in touch for repository access and a description of the issue.

  3. Get a pull request

    You receive a fix with a test that fails before the change and passes after it.

Recent public work

Everything below is on GitHub. Check it yourself rather than taking my word for it.

  • Paraloom · Solana

    Slashing left under-collateralised validators active. A validator could fall below the required token stake and keep co-signing settlements. Reported with a fix and test: issue #1406, PR #1407. Read the write-up →

  • Paraloom · Solana

    Token-2022 mints broke settlement. The co-sign code hardcoded the classic SPL token program. Issue #1363, PR #1364.

  • Go-Hybrid · Rust & Systems

    Compiler Soundness & Foreign Interface Security. Eight fixes merged directly into main with official credit: #3793, #3796, #3911, #3924, #3927, #3929, #3932, and #3935 modeling compiler soundness and standard library concurrency/IO surfaces. Official bounty claim logged in Discussion #295 with 22 additional verified fixes in queue. View live bounty tracker →

Go-Hybrid fixes #3793 and #3795 have landed on main with recorded bounty eligibility; remaining submissions are under maintainer review.

Pricing

Fixed prices in USD unless stated. Payments are handled by Stripe, so I never see your card details.

Quick fix

$50

One bug, one failing build or one small change. You get a pull request and a test.

Pay $50 →

Standard

$99 · NZ$150

A bigger fix or a self-contained feature, such as a module or a contract test suite.

Pay $99 USD → Pay NZ$150 →

Security review

$499

A line-by-line review of a smart contract or small codebase, with written findings, severity ratings and suggested patches. This is an independent review, not a formal audit firm's sign-off.

Pay $499 →

Monthly retainer

$49 / mo

Ongoing small fixes and reviews for a project you keep maintaining. Cancel any time.

Subscribe →

Questions

Short answers to what people usually ask first.

What if my problem doesn't fit a package?

Email aurelis.work@gmail.com or message me on GitHub before paying and describe it. If it's out of scope or I can't help, I'll say so up front.

Which languages and stacks?

Mostly Rust, Solana and Anchor, Go, and TypeScript. Smart contract work is my strongest area.

What if I'm not happy with the result?

Tell me what's wrong and I'll revise it. If the fix doesn't hold up, email aurelis.work@gmail.com and we'll sort it out.

Is the security review an audit?

No. It's an independent review by one engineer. It's useful for catching real bugs, but it isn't a substitute for a formal audit before launching something that holds significant funds.

Terms in brief

Plain language, not legal advice.

Scope and delivery

Each package covers the work described for it. If your task turns out to be larger than the package, I'll tell you before going further and you can decide whether to upgrade. Work is delivered as a pull request, a patch, or a written report, depending on the package.

Access and confidentiality

I'll only use repository access to do the agreed work, and I won't share your code or findings with anyone else. For public projects, I'll disclose any security issue only in the way you agree to.

No guarantees about security

A review reduces risk but can't prove code is free of bugs. Reviews and fixes are provided as they are, without warranty, and I'm not liable for losses arising from how the code is later used.

Payment

Payments are processed by Stripe and charged when you check out. Monthly retainers renew until you cancel.

Refunds and revisions

If a delivered fix fails to solve the agreed problem, I will revise it at no extra charge. If a bug proves to be outside our diagnostic capabilities or cannot be resolved within the scope, you will receive a 100% refund. Monthly retainers can be cancelled anytime with zero hassle.

Prefer crypto?

USDC works too. Email aurelis.work@gmail.com first so we agree the scope.

Base / EVM
0x38e0f40371be8b30f0909f890a1f701a25cd30cd
Solana
CRdpAku2qovsPN2wGej5AbgMNtuhRQtq3GKFDFfMkJsv