Skip to content
View kazuyaroz's full-sized avatar
4 followers · 15 following

Block or report kazuyaroz

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kazuyaroz/README.md

Kazuya — Security Researcher

Bug bounty hunter and autonomous-agent operator. I audit consensus-critical code, hunt bugs across AI-agent marketplaces, and build the automation that does the hunting.

Portfolio: https://kazuyaroz.github.io/portfolio

🔍 What I do

  • Consensus & crypto auditing — BFT consensus, TEE/enclave attestation, on-chain forensics
  • Bug bounty — HackerOne (yamazaki kazuya), GitHub/Algora, AI-agent task markets
  • Agent infrastructure — multi-platform bounty automation, A2A agent cards, x402 payment flows

🏆 Selected findings

Severity Target Issue
High (CVSS 7.5) Chia Network clvm_rs algorithmic complexity DoS
Medium (CVSS 6.0) Arc (Circle) Attestation bypass in TEE remote signer

40+ submissions across 8 platforms · 289K+ lines of Rust/Go audited

🛠️ Stack

Rust Go Python Solidity BFT Consensus TEE/Enclave Web3 gRPC Cryptography Static Analysis

📌 Featured work

📫 Reach me

Open an issue on any repo, or find me on HackerOne as yamazaki kazuya.

Currently: hunting AI-agent marketplaces and packaging open-source tools for distro repositories.

Pinned Loading

  1. agent-card agent-card Public

    A2A agent card for hermes-live-data-researcher

  2. bounty-hunter bounty-hunter Public

    Multi-platform bounty hunter for AI agents — scan, claim and track paid tasks across agent marketplaces

    Python

  3. flapjax-q80-audit flapjax-q80-audit Public

    FlapJax Treasury Audit Q80 — 10-29 COT outflows and funder analysis

  4. portfolio portfolio Public

    Security research portfolio — bug bounty findings, code audits and agent infrastructure

    HTML

  5. taskmarket-security-audit taskmarket-security-audit Public

    TaskMarket Diamond rev025 Security Audit — share validation finding

  6. x402-secscan-docs x402-secscan-docs Public

    x402-secscan Security Headers Analyzer API - Documentation