0xsubash · co-founder, Mokshya Protocol · Kathmandu / Dubai

I build open-source infrastructure
for blockchain & AI.

Working across Solana, EVM, Hyperliquid and Zcash. Rust · TypeScript · Python · Solidity. I ship small, self-hostable tools, publish them open, and run them in production.

View the work GitHub Email

Open to ecosystem grants · bounties · security audits

What I'm focused on now

Ship open-source developer tooling and on-chain infrastructure — indexers, agents, and execution tooling.
Secure EVM and Anchor contracts — reading them closely and building tools that catch the patterns that drain wallets.
Run independent Zcash light-client infrastructure, bringing regional endpoints to South Asia.

Open source

A few things I've built and maintain. Everything here is public and permissively licensed.

evm-token-guard Apache-2.0 · TypeScript

Static backdoor & honeypot triage for EVM token contracts. Flags hidden allowance backdoors, honeypot sell-blocks, uncapped fees and stealth mints from verified source in under a second — zero runtime dependencies. Built after finding exactly that backdoor in a live token.

security · static-analysis · solidity

signalview / perpsignal Apache-2.0 · Python

A backtestable signal engine for perpetual-futures strategies — a signal DSL, indicator library and an honest backtester. On PyPI: pip install perpsignal.

hyperliquid · perps · quant

zeclight Apache-2.0 · Zebra + Zaino

Independent Zcash light-client infrastructure — a reproducible node with public status tooling, bringing regional light-wallet endpoints to South Asia. Zcash Community Grants applicant.

zcash · privacy · rust

ApiWallet Solana · Anchor

A Solana program that lets an owner grant a session key a narrow, pre-approved set of swaps — without ever exposing the private key or granting custody.

solana · session-keys · self-custody

More at github.com/subashmokshya.

Live

Things running right now — each with its own page here.

Solana Ecosystem Dashboard live · /solana

An auto-updating report + interactive dashboard for the Solana ecosystem — network performance (TPS, epoch, supply), validator health, and DeFi (TVL, DEX volume, stablecoins) — via direct Solana RPC with no API keys. Outputs live HTML, Markdown and JSON.

solana · rpc · validators · defi · live data

Security

I read EVM and Anchor contracts closely. The tool below started as a real incident — a token whose transferFrom let a privileged address skip the allowance check and drain approved wallets, hidden behind anti-bot code.

$ evm-token-guard 0xToken… --chain ethereum

evm-token-guard  static token-risk triage
risk:  CRITICAL    score: 60/100   findings: 1

[CRITICAL] Privileged bypass of allowance in transferFrom  (allowance-backdoor)
  L44: if (_isBot[msg.sender]) {
  transferFrom branches on an owner-controlled flag so flagged
  addresses skip the allowance check. The owner can flag its own
  address and drain any approved holder.

Open to competitive audits and bug bounties (Sherlock, Immunefi, Code4rena and the Solana / Zcash ecosystem programs), and to being paid to review contracts directly.

Where I work

Solana

On-chain tooling, indexers and agents; Anchor programs including non-custodial session-key delegation.

EVM

Solidity contracts on Base & BSC, plus contract security review and static analysis tooling.

Hyperliquid

Perp-market signal research and execution — open-sourced as perpsignal.

Zcash

Independent light-client infrastructure (Zebra + Zaino) and upstream contributions to the indexer.

Selected track record

2025→
zeclight, evm-token-guard, perpsignal — shipping open-source infrastructure and security tooling; building Alura, a discipline engine for perp traders.
2022
Co-founded Mokshya Protocol, an open-source protocol studio. First grant from the Aptos Foundation to build Wapal, which became a leading NFT marketplace on Aptos.
2021
Helped build the initial product for Zebec (Solana) and raise $32M. Also built ReconWithMe, an automated VAPT tool featured in the Kathmandu Post.
2020
Thesis on using blockchain to cut remittance costs. Raised $34k to build two classrooms for a school in Dolpa, Nepal.

The longer story

Born in a small village called Devpur, Kavre, Nepal — the youngest of five, to a school teacher and a housewife.

Started working at 17 as a cricket journalist. Dropped undergraduate physics for entrepreneurship, and a love of coffee and books led me to open Palpasa Cafe at 20. It failed. I took a year off and travelled to Dolpa — one of the remotest parts of the world — to teach in a school. Dolpa taught me most of what I know about life and death, success and failure. It still drives me.

I came back fascinated by Bitcoin and blockchain, started a cybersecurity company with friends, and wrote my thesis on reducing remittance costs with blockchain in 2020. My first international break was helping Zebec build and raise $32M during Solana summer. I made my first $100k from 2.5 SOL — and lost most of it trading NFTs.

In 2022 I co-founded Mokshya Protocol as an open-source studio and won a grant from the Aptos Foundation to build Wapal. I got into perps trading, and have been trading almost daily since. In late 2025, with the support of my mentor Mr. Bala Chandrasekaran, I moved to Dubai to build something lasting — and to give back.

Married my love Anupa in early 2025, after 6+ years together. Today I build open-source infrastructure, secure smart contracts, and chase the next big thing — one shipped tool at a time.

Get in touch

Building something, running a grant program, or need a second pair of eyes on a contract? I'd like to hear about it.

subash@mokshya.ai GitHub PyPI

I build open-source infrastructurefor blockchain & AI.