Experience

• Architected and built a planetary-scale CRDT-based content routing system end-to-end, including a sharded backend with cross-shard sync, token-metered accounting and billing, cutting DHT content announcements by 30×–3,000,000× (reduction scaling with catalog size).
• Authored and managed the IPFS Kademlia DHT specification and its Go/Rust implementations, used by 15,000–150,000 nodes daily.
• Designed and shipped Reprovide Sweep, a keyspace-sweeping redesign of DHT content announcements: ~97% fewer lookups, and modest nodes can advertise 10M+ CIDs, up from ~1K. Default provider system in Kubo since v0.39.
• Drove code quality, performance, and technical-debt reduction across the Go stack (kubo, boxo, kad-dht) through 400+ authored and 500+ reviewed pull requests.

• Co-founded the company: shaped business strategy, scoped service offerings for prospects, and led 4 customer projects to completion.
• Owned and operated the company website and AWS infrastructure behind the weekly network-measurement reports on blockchain networks, cutting report generation time 4×.
• Investigated the Ethereum discv5 DHT by examining 10,000+ peers, assessing network reliability, and publishing statistical findings.
• Developed tooling to monitor the DHT client population and detect DHT eclipse attacks.

• Led security of the libp2p DHT: ran coordinated disclosure for externally-reported CVEs, shipped discreet fixes to protect a network taking 6+ months to upgrade, and hardened the protocol to reduce attack surface and improve resilience.
• Proposed a privacy-enhancing IPFS DHT upgrade that decouples requester identity from content identifiers, improving reader privacy, published at SAC ‘25.
• Measured the IPFS network, capturing and analyzing billions of peer-to-peer requests, then publishing reports on DHT routing-table health and Bitswap discovery efficiency.
• Led a team of three building a novel DHT implementation from scratch, replacing unconstrained concurrency with a modular, deterministic, single-threaded state machine engineered for maintainability and performance.

• Architected, installed, and operated globally deployed network security solutions: SD-WAN, MDR, VPN, firewalls, and secure proxies.
• Served in the 24x7 Mission Control support rotation for enterprise customers.

• Completed a master’s thesis on cryptographic agility in the post-quantum era, cataloging 13 requirements and evaluating 4 production crypto libraries (JCA, GPGME, Qt SSL, OpenSSL) against the framework.
• Developed a Go SBOM and cryptographic-inventory tool mapping a package’s crypto usage via static call-graph analysis, flags deprecated algorithms, and renders as interactive dependency diagrams.

• Analyzed the FAA’s Privacy ICAO Address (PIA) program, meant to anonymize US General Aviation, and re-identified and tracked all 16 aircraft that used it over 5 months using only public crowdsourced ADS-B data.
• Built a privacy simulator showing ~69% of a hypothetical 100-aircraft fleet stays trackable even at the program’s fastest address-rotation rate; proposed fixes cutting that to under 1% (DEF CON talk, paper).

• Provisioned and configured BGP/OSPF lab topologies on Cisco IOS for Professional Services customer engagements, automating repetitive device setup in Python.

Education

• Focus: Distributed Systems & Cryptography
• GPA: 5.52/6
• Notable projects: Master thesis, Crux IPFS, Passtor, Aircraft Privacy Simulator, Grep As-A-Service

• Exchange year at HKUST
• GPA: 5.06/6
• Notable projects: Smart Grid Security, unixv6fs, Bomberman

Skills

Publications

Talks

IPFS Camp 2024

IPFS Thing 2023

IPFS Camp 2022

IPFS Thing 2022

DEF CON 28