Smart Contract Auditor2025.08 — 2026.04
Hashlock, Remote — EVM smart contract audits across Solidity and Vyper
Security researcher
Songhyun Bae
@bshyuunn
Studying Cyber Defense at Korea University and playing CTFs with CyKor. Mostly into Pwn, Web3 and Kernel — and always happy to dig into something new.
§1Experience
§2Education
Korea University2024.03 —
B.S. Cyber Defense · Seoul, South Korea
§3Disclosed Bugs
Apple 1
CVE-2025-24184
CoreMedia Playback — Denial of service
Anthropic 1
HackerOne #3795252
Claude Code — High
Toucan 3
Immunefi #40684
Toucan Protocol — Medium
Immunefi #40596
Toucan Protocol — Medium
Immunefi #40497
Toucan Protocol — Low
Open Source 3
CVE-2025-30216
NASA CryptoLib — Heap-based buffer overflow
GHSA-58p5-r2f6-g2cj
Pixar OpenUSD — Use-after-free
CVE-2024-42358
PDFio TTF parser — Denial of service
WordPress Plugin 4
CVE-2024-24714
Icons Font Loader — Arbitrary file upload
CVE-2023-48329
Fast Custom Social Share — Stored XSS
CVE-2023-39924
Simple File List — Stored XSS
CVE-2023-33213
wpView — Stored XSS
Others 5
CVE-2024-45872
Bandiview PSD parser — Heap-based buffer overflow
CVE-2024-45871
Bandiview PSD parser — Denial of service
CVE-2024-45870
Bandiview JXR parser — Denial of service
KVE-2024-0410
SGA ViruChaser — DLL hijacking
KVE-2024-0395
Hauri ViRobot — DLL hijacking
§4Audit Contests2C · 18H · 19M · 1L
#1Strobe SC · HackenProof
1C
2025
#1Neutrl Protocol · Sherlock
1M
2025
#3Coinbase EIP-7702 Proxy · Cantina
1M
2025
#5RAAC Core · CodeHawks
8H10M
2025
#5Folks Finance Staking · Immunefi
1L
2026
#10ENS · Immunefi
1C1H1M
2026
#10InterPol · Cantina
1H2M
2024
···all contests
§5Awards
10thLakeCTF Finals 25-26 with CyKor
2026
1stCyber Security Hackathon with Boolean
2024
FinalCODEGATE Junior
2023
FinalWACON Junior
2023
FinalWhiteHat Contest Junior
2023
FinalCCE Junior
2023
2ndKorea Code Fair Hackathon
2022
3rde-ICON World Contest
2022
4thKOSPO Web Security Competition
2022
4thK-ICT Data Creator Camp
2022