◉ NOW PLAYING · ~/anukul · 0% cool · 100% shipped

ANUKUL
PANDEY

backend & security engineer

I ship production protocol infrastructure — indexers, explorers, data APIs — on chains, and I break web apps with permission. 3+ years, 10+ chains, an acknowledged bug-bounty researcher. Grew up on Ben 10, Power Rangers & Hot Wheels, so this site is a media player. Hit ▶.

resume.pdf ↗ experience projects say hi

Indore, India · UTC +5:30 · open to remote

Anukul Pandey leaning against window blinds — ● RECCAM 01 · P1

player stats

BACKEND88
WEB385
SECURITY78
HARDWARE62
STAGE66

3+years shipping protocol infra

10+chains / protocols added

17+bug-bounty programs

50+merged open-source PRs

SOLIDITY ✦ RUST ✦ TYPESCRIPT ✦ PYTHON ✦ EVM INDEXERS ✦ BLOCKSCOUT ✦ POLKAVM ✦ SUBSTRATE ✦ HARDHAT ✦ WAGMI ✦ DOCKER ✦ BURP SUITE ✦ OWASP TOP 10 ✦ TAURI ✦ FLUTTER ✦ NEXT.JS ✦ SOLIDITY ✦ RUST ✦ TYPESCRIPT ✦ PYTHON ✦ EVM INDEXERS ✦ BLOCKSCOUT ✦ POLKAVM ✦ SUBSTRATE ✦ HARDHAT ✦ WAGMI ✦ DOCKER ✦ BURP SUITE ✦ OWASP TOP 10 ✦ TAURI ✦ FLUTTER ✦ NEXT.JS ✦

SIDE A · experience

tracklist

every job is a track. from a factory floor in 2021 to whatever we build next.

01
2021 · Indore intro

Volvo Eicher Full-Stack Developer Intern

Replaced paper defect-tracking across 8 assembly zones with a QR-driven web app — zone forms + SMS alerts — plus a paperless records app (Flask, PyMongo).
- Flask
- PyMongo
- QR + SMS
02
2022 · Indore intro

ACOEM Ecotech Engineering Intern

Environmental-monitoring instrumentation on the plant floor, plus Kaizen process-improvement proposals.
- instrumentation
- Kaizen
- monitoring
03
Jan 2023 – Jun 2026 ★ title track

Reef Chain Blockchain Backend Engineer

Built and ran indexers, the Reefscan explorer, and data APIs polling in lockstep with the 10-second block time (~8,600 syncs/day, indexed data within ~10s of chain head). Led the EVM migration from Substrate-EVM to PolkaVM — shipped the @reef-chain/evm-util-lib SDK, a Reefswap Uniswap-V2 fork, the Sqwid NFT marketplace, a Blockscout explorer fork, a Rust resolc contract verifier, and node/validator infra. Cut a 3–4 hr release process to ~2 min, and fixed the qix npm supply-chain vuln.
- Indexers
- Blockscout
- PolkaVM
- TypeScript SDK
- Rust
- Docker
04
Jun 2023 – Jul 2025 b-side

SigNoz Technical Writer (Freelance)

Authored 50+ merged PRs (docs + sample apps) across 15+ stacks — PHP, Rust, JS/TS, Python, Java, .NET, Go, Elixir, Swift, Kotlin, RN, Next.js, Nginx — covering OpenTelemetry app- and OS-level instrumentation.
- OpenTelemetry
- docs
- 15+ stacks
05
Nov 2024 – May 2025 b-side

Darve Full-Stack (Freelance)

Built the Flutter mobile app for a social challenges & payments platform — passkey auth, chat, challenges, notifications, in-app Stripe payments — plus Rust backend services for auth, Stripe webhooks, and transaction APIs.
- Flutter
- Rust
- Stripe
- passkeys
06
Apr 2025 – present b-side

Kokopai Blockchain / Full-Stack (Freelance)

Built the multi-chain wallet & payments layer for a creator-first AI video + NFT platform: WalletConnect + MetaMask SIWE auth, Reown multi-chain support, chain-aware routing, a canonical blockchain server, and a hot-reload Docker dev stack (Colima, Infisical).
- WalletConnect
- SIWE
- Reown
- multi-chain
07
Jan 2026 – Feb 2026 b-side

Sixth Sense AI Frontend / Product (Contract)

Built a cross-platform desktop app with Tauri (Rust) + React + TS for an AI venue product: an AI chat assistant, structured menu CRUD, guest-feedback UX, and crash/performance triage.
- Tauri
- Rust
- React
08

next track open

your team?

Open to remote — backend, protocol infra, full products, or a security pass on what you’ve got.

see how i work →

SIDE B · projects & ventures

playlist

13 entries — an onchain video platform, an AI-agent payment gate, a freelance SaaS, security tooling, a game. click any cover.

#001founder

Droppie

No-code tool to turn a CSV into a gas-efficient Merkle-proof airdrop on any EVM chain — deployed straight from your wallet, claimable in one click. App + server + Solidity.
- Merkle proofs
- EVM
- no-code
droppie.notcool.in ↗
#002live · hackathon win

GateKeep

Stripe for AI-agent API calls. Wrap any REST endpoint in a pay-per-call gate — agents pay in USDC over the open x402 protocol, on-chain, no API keys, no humans in the loop.
- x402
- USDC
- Avalanche
gatekeep.notcool.in ↗
#003client

Kokopai

A creator-first onchain video platform where every video ships a collectible “Echo.” I built the multi-chain wallet & payments layer — WalletConnect + MetaMask SIWE sign-in, Reown multi-chain, and chain-aware routing across Ethereum, Polygon & Arbitrum.
- SIWE
- WalletConnect
- multi-chain
kokopai ↗
#004live

Reefscan Explorer

Blockchain explorer + indexers syncing with the 10s block time (~8,600 syncs/day). CoinGecko-compatible supply APIs, cross-chain supply accounting, 4 exchange/on-ramp integrations.
- explorer
- indexer
- supply APIs
reefscan.com ↗
#005live

Tryo

Never guess your makeup shade again. Paste any product link — Nykaa, Sephora, Amazon, MAC — and Tryo extracts the true pigment and renders it on your face in real time (468-pt mesh, AI shade-matching, nothing leaves the browser).
- AR try-on
- face mesh
- AI
tryo.notcool.in ↗
#006live

Owlnighter

Close the lid — the owl stays up. A tiny pixel owl for your macOS menu bar that keeps downloads downloading, builds building & servers serving with the lid shut. No Electron, ~0.5 MB, no accounts. (he blinks. you can boop him.)
- macOS
- menu bar
- no Electron
owlnighter.notcool.in ↗
#007waitlist

Kleos

A dark mythological action-platformer inspired by Homer’s Odyssey — ten winters of war are ended, and one cursed king must carve a road home through the gods of Olympus. “the war is won. the gods are not finished.”
- game
- mythology
- landing
kleos.notcool.in ↗
#008saas

Volt

Your entire freelance business in one place — time tracking, invoicing, expenses & tasks, beautifully designed and seamlessly integrated. Full marketing site + app.
- SaaS
- freelance
- product
#009client · live revenue

Deepti Ecostays

A booking site for a private eco-farmhouse in Madhya Pradesh — “slow mornings under the teak canopy.” Live availability, coupon codes, admin-controlled rates, guest reviews, invoices and one-tap call / WhatsApp. Taking real bookings.
- booking
- client work
- admin panel
deeptiecostays.in ↗
#0104.4k+ followers

Coding Jungle

Co-founded content brand — your hub for hacking, AI & tech. Bite-sized ethical hacking & cyber-security, plus a blog for the long-form breakdowns. 4,400+ followers across IG, Telegram & more.
- content
- pentesting
- community
cj.notcool.in ↗
#011grant

Reef Name Service

ENS-style on-chain naming — registry, ERC-721 base registrar, commit/reveal controller, public resolver + web app. Reef Community Developer Fund grant recipient.
- Solidity
- ERC-721
- commit/reveal
github ↗
#012tool

wa-spammer

One console line, N WhatsApp messages. A tiny DevTools snippet generator for WhatsApp Web — fill in message, count & delay, copy, paste. Zero install, all client-side.
- vanilla JS
- DevTools
- zero-install
try it ↗
#013tooling

Offensive tooling

Open-source security tools: sqlinjector (SQLi scanner + dork scanner), LFI-Hunter, a dir-buster, a WebRTC deanonymization PoC, and a qix npm supply-chain scanner.
- Python
- SQLi
- LFI
- WebRTC
github ↗

BONUS DISC · security research

boss rush

responsible disclosure only. some findings are public, most stay under wraps — here are the bosses on the record.

BOSS 01broken access control

GitHub

HP0/999

Surfaced an access-control gap in organisation internal repositories — an external, non-member collaborator could hold hidden push access that didn’t surface in the members list. Reported via HackerOne, triaged & fixed. GitHub Thanks · reputation 22.

LOOT · $500 bounty · resolved

BOSS 02XSS

Domino’s

HP0/999

Cross-site scripting on a public surface — reported and acknowledged in Domino’s official responsible-disclosure hall of fame.

LOOT · hall of fame · verify ↗

BOSS 03web app

Khalsa College

HP0/999

A web-app vulnerability responsibly reported & documented to the institution — patched after disclosure.

LOOT · patched after disclosure

SAVE FILE · hackerone.com/0xanukulA resolved GitHub bug bounty ($500), GitHub Thanks & reputation, hunting since 2022. Click through to verify.

moveset

SQL INJECTION↓ ↘ → + P' OR 1=1 --
LFI← ↙ ↓ + K../../etc/passwd
XSS→ ↓ ↘ + P<svg onload=…>
BROKEN AUTH↓ ↓ + KAuthorization: ?
ACCESS CONTROL→ → + P/api/org/other/…
LOGIC FLAWS↑ ↑ ↓ ↓ …think like the dev didn’t

OWASP Top 10 the manual way, with Burp Suite plus my own tooling. I break it down in public on Coding Jungle, keep teardown notes in nice-catch, and file everything responsibly — reports first, writeups later.

bosses encountered · 17+ programs

GitHub
Domino’s
Walt Disney
Automattic / Tumblr
Linux Foundation
Polygon
LinkedIn
Vercel
Chia Network
Lightspark
Databricks
New Relic
eToro
Basecamp
Kraden
Panther Labs
Judge.me

HIDDEN TRACK · hardware & IoT

the garage

before protocols and pentests, I was soldering sensors and flashing microcontrollers — and taking apart things that weren’t always mine to take apart.

assistive tech · featured build

Obstacle-Detection Glasses

A wearable navigation aid for the visually impaired — sunglasses rigged with ultrasonic sensors that gauge distance to obstacles ahead and to the sides, then warn the wearer through a buzzer and speaker. Built on an Arduino Nano with HC-SR04 sensors and a transistor-driven audio-out.

Arduino Nano
HC-SR04
buzzer + speaker
C++

PART 01

ESP8266 Robot

A little WiFi-driven robot on the ESP8266 / NodeMCU board.

github ↗ PART 02

WiFi LED

Flip an LED on and off over WiFi — the classic first IoT build.

github ↗ PART 03

awesome-nodemcu

Notes & sketches from learning the NodeMCU board inside out.

github ↗ PART 04

Arduino from scratch

A “learn Arduino with zero prior knowledge” repo for beginners.

github ↗ PART 05

Raspberry Pi home server

Self-hosting on a Raspberry Pi 4B — my always-on little box at home.

github ↗

PART 06

hardware hacking

Bringing a decade-old PSP back from a pile of parts, plus teardown tinkering & an Android-hacking crash course.

read the PSP fix ↗

VHS · talks & workshops

mic in hand

web3, security & building in public — explained out loud to four college auditoriums and a GDG Indore crowd. Pitching GateKeep (“agents can’t pay the way humans do”), a campus workshop, and the room that showed up. Press ▶ on the player.

▶ PLAY

EQ PRESETS · the toolkit

equalizer

six colours, one megazord. each ranger is a part of the toolkit.

RED

backend & devops

Node.js
Flask
Docker
Nginx
CI/CD
Linux
Bash
Git
OpenTelemetry

BLUE

web3 / protocol

Indexers
Explorers
EVM / PolkaVM
Contract dev & testing
Protocol forking
Substrate / Polkadot
Hardhat
wagmi / ethers
MetaMask
IPFS

YELLOW

security

Web app pentesting
Vuln research
Responsible disclosure
Exploit tooling
OWASP Top 10
Burp Suite

BLACK

languages

TypeScript
JavaScript
Python
Rust
Solidity
C++

PINK

frontend / mobile

React
Next.js
Vue
Nuxt
Flutter
Tauri

GREEN

databases & bench

PostgreSQL
MongoDB
Arduino
ESP8266

GOLD RECORDS · achievements

high scores

🥇1st place — Reef India Hackathon10+ teams · $1,000100G
🏆Winner — Gelato Hackathonhackathon win80G
🔺Winner — Avalanche Hackathon$200 · built GateKeep80G
💰Reef Community Developer Fundgrant for Reef Name Service50G
🐛GitHub bug bounty$500 · resolved via HackerOne50G
🎓B.Tech E&I, SGSITS IndoreCGPA 8.62 / 1040G
🎤Web3 talks across 4 colleges+ a GDG Indore workshop40G

~8.6kindexer syncs / day

195public repos

4.4k+Coding Jungle followers

2 minrelease, down from 3–4 hrs

no cookies. no popups. no newsletters. just work.

cool is a cage. this is where I keep the receipts — protocols I forked, apps I shipped, bugs I reported. every experiment gets a subdomain on the notcool.in wall and a burst of hyperfocus.

REQUEST LINE · contract & freelance

i build the backend other people rely on.

Three years shipping production protocol infrastructure: indexers, block explorers and data APIs across 10+ chains. I also build full products end to end, and I break web apps with permission. available for contract work

for protocols & web3 teams

Chain infrastructure

The unglamorous layer everything else depends on. What I did full-time for three years.

Indexers & block explorers
Data & supply APIs
Contract integration, SDKs
Node & validator infra

for founders

Full product builds

Idea to something real users log into. Next.js, TypeScript, Postgres — shipped, deployed, handed over documented.

Multi-tenant SaaS
Dashboards & admin tools
Auth, payments, roles
Deployment & handover

for businesses

Booking & ordering systems

Not a brochure site. Live availability, real bookings, coupons, invoices and analytics — the things that take money.

Booking with live availability
QR menus & ordering
Admin panel you can run yourself
Hosting & changes on retainer

with permission, always

Security review

17+ bounty programmes and a resolved GitHub finding. I look at your app the way someone unfriendly would.

Web app penetration testing
Auth & access-control review
Written report with repro steps
Fix verification after patching

how it goes

You tell me the problemNot the solution. What’s broken, who it’s for, and what “done” looks like.
I scope it in writingFixed deliverables, timeline and price before anything starts.
I ship in milestonesWorking software at each one, not a status update. Billing follows delivery.
You own everythingCode, repo, deployment, docs. No lock-in, no hostage keys.

start a project →all channels

CO-OP · find me online

insert coin

I build in public. security & code, mostly. pick a server.

anukul.030601@gmail.com

say hi resume.pdf ↗

made in Indore · UTC +5:30 · also at anukul.notcool.in · psst: ↑↑↓↓←→←→BA

ANUKULPANDEY

player stats

Volvo Eicher Full-Stack Developer Intern

ACOEM Ecotech Engineering Intern

Reef Chain Blockchain Backend Engineer

SigNoz Technical Writer (Freelance)

Darve Full-Stack (Freelance)

Kokopai Blockchain / Full-Stack (Freelance)

Sixth Sense AI Frontend / Product (Contract)

your team?

Droppie

GateKeep

Kokopai

Reefscan Explorer

Tryo

Owlnighter

Kleos

Volt

Deepti Ecostays

Coding Jungle

Reef Name Service

wa-spammer

Offensive tooling

GitHub

Domino’s

Khalsa College

moveset

bosses encountered · 17+ programs

Obstacle-Detection Glasses

ESP8266 Robot

WiFi LED

awesome-nodemcu

Arduino from scratch

Raspberry Pi home server

hardware hacking

backend & devops

web3 / protocol

security

languages

frontend / mobile

databases & bench

no cookies. no popups. no newsletters. just work.

Chain infrastructure

Full product builds

Booking & ordering systems

Security review

how it goes

fund my claude habit

ANUKUL
PANDEY