About me

I'm Jonas Merhej, also known as BonisTech. I'm a blockchain security researcher available for contract work with teams building and maintaining blockchain applications.

I help teams understand how their systems can fail, investigate security risks, and turn findings into practical improvements. I'm open to new clients, whether you need a focused review or ongoing security support.

How I can help

• Smart contract reviews: Review Solidity code and contract interactions, investigate potential vulnerabilities, and discuss remediation with your engineering team.
• Security research: Explore attack scenarios, investigate unexpected behavior, and assess assumptions in your protocol's design.
• Ongoing advisory: Bring a security perspective to architecture decisions, code changes, and release planning as your project evolves.

Working together

We start by discussing what you're building, the scope of the work, and your timeline. From there, we agree on deliverables and an engagement that fits your team's needs.

For a first conversation, send a short description of your project, a repository or documentation link if available, and your target dates to me@bonis.tech.

Research & writing

I share technical notes on this blog, including stateless Solidity functions and security risks in Rust procedural macros. They're a good starting point for getting to know how I approach technical problems.