Joaquin Pereyra
Security Engineer at Coinspect Security
Montevideo, Montevideo, Uruguay
Summary
🤩
Rockstar🎓
Top SchoolJoaquin Pereyra is a Security Engineer with 11 years of software experience and eight years focused on application and distributed-systems security, currently leading audits at Coinspect. He blends hands-on secure coding and tooling—building in-house automation and contributing to Foundry/Forge—with deep grey-box testing and threat modeling for blockchain and EVM projects. Previously he hardened a Bitcoin sidechain at IOV Labs, created MercadoLibre’s AFIP static analysis tool, and contributed to notable open-source security projects like RSKj and Faraday. Based in Montevideo, he pairs developer empathy and mentorship with pragmatic risk assessment, and often surfaces non-obvious exploit vectors through detailed exploit write-ups and custom testing frameworks.
11 years of coding experience
5 years of employment as a software developer
Associate’s Degree, Journalism, Associate’s Degree, Journalism at TEAMaster’s Degree, Computer Engineering, Master’s Degree, Computer Engineering at Universidad de Belgrano
Spanish, English, French, faroese
Stackoverflow
956reputation
75kreached
23answers
18questions
Github Skills (24)
apim10
rootstock10
python10
testing10
evm10
audit10
java10
security10
javas10
api10
xml-parsing10
blockchain10
smart-contracts10
auditing10
bitcoins9
Programming languages (12)
Github contributions (5)
coinspect/learn-evm-attacks
Nov 2022 - Mar 2023
Learn and contribute by exploring blockchain attacks in detail. Maintained by Coinspect smart contract audit team, renowned for their top-tier smart contract audit services.
Role in this project:
Security Engineer
Security EngineerContributions:1 release, 17 reviews, 79 commits in 3 months
Contributions summary:Joaquin's contributions primarily involve analyzing and documenting exploits related to various blockchain vulnerabilities. They added descriptions of attacks related to Nomad, PolyNetwork, DAO Maker, Arbitrum Inbox, MBCToken, Seaman, TempleDAO, and other projects. The user's work includes detailing the vulnerabilities, attack vectors, and potential mitigations. They leverage their expertise in smart contract security to identify and explain weaknesses in the provided code.
ethereumsecurityvulnerabilitiesevmaudit
infobyte/faraday
Mar 2016 - May 2017
Role in this project:Back-end Developer
Back-end DeveloperContributions:610 commits, 2 PRs, 1 push in 1 year 1 month
Contributions summary:Joaquin primarily contributed to the Faraday Penetration Test IDE, a vulnerability management platform. The commits focus on integrating and improving features related to plugins, particularly the Qualysguard, WPScan, and MetasploitOn plugins. Changes include parsing output, adding vulnerability information, and improving data handling, indicating work on backend functionality and data processing within the application.
vulnerability-managementbugbountycvecollaborationvulnerability-scanners
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.