Software & web3 engineering · by Jordy de Koning

Hard to break.
Easy to use.

I'm Jordy. Co-founder and lead developer at Nysa, building DeFi RWA on Ondo assets. Before that: protocol monitoring in Go, EVM dApps, and audit contests on live protocols. I think like an attacker the whole way through.

Get in touch Browse the work →

2014

Shipping since

Roles

Side projects

Selected work

Projects

All projects →

Things I build outside client work — on-chain, in the open, shipped.

SHIPPED

Need4Audit

Web3 security marketplace connecting companies with 50+ verified researchers

soliditylaraveltypescript

SHIPPED

Solana Monitor Indexer

Real-time Solana indexer & monitoring, alerts on specified on-chain events

rustsolana

IN PROGRESS

Alpha-Charts

Trading journaling app with AI coaching

aitrading

Career

Where I've worked

12 years shipping production software — the last several mostly on-chain.

jul 2026 — now

Co-founder & Lead Developer

Nysa

Building DeFi RWA on Ondo assets — borrowing and lending against tokenized real-world assets.

solidity · foundry · typescript

jan 2026 — now

Lead Developer, Enable

Humanity Link

Platform NGOs use to fund beneficiaries on-chain and distribute aid transparently.

solidity · laravel

jan 2024 — oct 2025

Software Engineer

Yala Labs

Protocol monitoring in Go with Prometheus and Grafana; liquidator bot development.

go · prometheus · grafana

2023

Web3 Security Researcher

Code4rena

Audit contests on live protocols — several High and Medium severity findings.

solidity · foundry

apr 2021 — jun 2023

Full-stack Blockchain Developer

REIT Development · Dubai

EVM dApp development with .NET backends and Vue frontends; Azure Pipelines CI.

.net · vue · evm

apr 2019 — 2021

Full-stack Software Engineer

New Nexus

Full-stack applications with .NET and Vue; Azure Pipelines CI.

.net · vue · azure

2014 — now

Co-founder & Developer

Nefkon → Chainforce Labs

Started at university building web applications in Laravel and Django; renamed to Chainforce Labs in 2026.

laravel · django · php

Client work

Built for others

Delivery work alongside the protocol engineering — integrations, platforms and commerce.

Magento Supplier Automation

Supplier CSV & API imports with AI product-content generation — up to 50% time saved

magentophpai

Logistics Automation

Integrated planning connecting Sherpaan orders with Trackpod delivery scheduling

laravelapi integration

Kappr

Booking software for barbers

vuenuxtsaas

Raak Group Gas Maintenance Portal

Cloud platform for sharing gas-installation maintenance documents with clients

laraveldocker

Toolkit

What I build with

The honest version — what's open on my machine most days, what I pick up when a project calls for it, and what I'm still getting comfortable with.

solidity DAILY

laravel DAILY

typescript DAILY

vue / nuxt DAILY

go DAILY

foundry OFTEN

python OFTEN

rust OFTEN

docker / k8s OFTEN

prometheus / grafana OFTEN

swift LEARNING

saltstack LEARNING

Writing

Notes and articles

Everything →

AUDIT

Need4Audits Case Study with PashovAI and NemesisAI

AUDIT

Gold Exchange Protocol

ARTICLE

I Exploited React2Shell and Got Shell Access

ARTICLE

I Hacked AI To Build Me a C2 Server and get Shell Access

AUDITNeed4Audits Case Study with PashovAI and NemesisAI. Executive case study of AI-assisted smart contract auditing on Need4Audits: PashovAI surfaced core escrow/accounting risks, and NemesisAI verified residual state-machine flaws after fixes, including a high-severity finalizeAndPay status-gating issue.

AUDIT

Need4Audits Case Study with PashovAI and NemesisAI

Executive case study of AI-assisted smart contract auditing on Need4Audits: PashovAI surfaced core escrow/accounting risks, and NemesisAI verified residual state-machine flaws after fixes, including a high-severity finalizeAndPay status-gating issue.

mar 2026

AUDIT

Gold Exchange Protocol

Security audit of Gold Exchange smart contracts identifying critical vulnerabilities in oracle implementation, minting logic, and economic design.

dec 2025

ARTICLE

I Exploited React2Shell and Got Shell Access

In this hands-on post, I show how I exploited the React2Shell (CVE-2025-55182) vulnerability to download a C2 agent and gain shell access on a controlled Ubuntu VM

dec 2025