that one time i got hacked: a security incident breakdown
a breakdown of how a routine development task led to a major security breach, loss of money and mental peace...
KushagraSarathe
Product & Design-Focused Fullstack Engineer
hiee, thanks for visiting my website! i'm a HUMAN software developer, i write code and bugs (it happens sometimes).
6+
Years in Tech
22
Hackathon Wins
About Me
i've been writing code for almost 6 years now, with majority of my work in the Web3 space. I've participated in 30+ web3 hackathons and won 22 of them.
currently, I'm a founding engineer at peanut.me, a small team focused on building a global cash app. payments.
when i'm not coding, you can find me bowling, writing poetry, or hanging out with my friends.
Experience
Dec 2024 - Present
Founding Frontend Engineer
Peanut Protocolbuilding a global cash app that allows you to send and receive money anywhere in the world using crypto.
- doing anything and everything to fix payments @peanut.me
May 2024 - Aug 2024
Software Engineer Intern
Nethermindinterned with Nethermind, a leading web3 company, built a frontend dashboard and backend API queries for EigenLayer Restaking dashboard.
- built frontend dashboard and backend api queries for eigenlayer restaking
- integrated APIs and wrote unit tests using jest for a gaming sdk on improbable metaverse
- migrated frontend framework for starknet-by-example
Apr 2024 - Nov 2024 (Part-time)
Frontend Engineer
Spreadefiworked on the frontend for Spreadefi Perpetual DEX, a decentralized exchange for perpetual futures contracts, built with NextJs, TypeScript, TailwindCSS, ShadCN-UI, WAGMI/VIEM, Recharts, React Query, NestJs, Redux.
- built mvp ui components for spreadefi perpetual dex
- managed frontend architecture and development
Aug 2023 - Apr 2024
Frontend Engineer
Builderstribe (now Rabble)worked on the frontend for Buidl.so, a platform
- built responsive ui components for buidl.so, handled api integrations, authentication flows, and state management
- managed frontend for the core product and internal tools.
Dec 2020 - May 2022
Security Researcher & Bug Bounty Hunter
HackerOne, Bugcrowd, Intigriticonducted vulnerability research and bug bounty hunting across major platforms, identifying and responsibly disclosing security flaws in web applications.
- 2 years of active bug bounty hunting and vulnerability research
- discovered and reported security vulnerabilities across multiple programs
- specialized in web and android application testing
Featured Projects
1st Place - 1inch
Non-custodial stablecoin yield engine using session keys and EIP-7702 smart accounts. Won 1st place in 1inch category at ETH Cannes 2025.
Next.jsTypeScript1inchEIP-7702
Complete frontend for an insurance platform built for the GHO ecosystem. Enables users to protect their DeFi positions with decentralized insurance.
Next.jsTypeScriptWagmiGHO