github.com/Shogoki
linkedin.com/in/sven-igl
Sherlock
profile
About
I have been in IT since 2009. I started as a system engineer running datacenter infrastructure, moved into full-stack development in 2019 and got into Web3 security in 2023. The last two and a half years I spent on the core team at Sherlock, first scoping and staffing smart contract audits, then designing and building Sherlock AI and the Sherlock Audit Engine.
I like working on the whole thing: architecture, backend, frontend, infrastructure and CI/CD. Having spent time on the attacking side, I also tend to know where things break, so security is part of how I build. I work remotely from Germany, mostly in Python, TypeScript and Go, plus Solidity and a bit of Rust.
When I am not at a keyboard I am probably travelling or diving.
Projects
Sherlock AI
Sherlock’s AI auditing product. I planned the architecture from scratch, implemented it and kept it running in production. It runs on models from Anthropic and OpenAI.
Sherlock Audit Engine
A security review platform run as a competition: hundreds of security researchers, AI auditors and base models submit findings through an API or the UI, and judging is automated with AI. I designed and built it.
Audit contest and bug bounty platforms
The platforms behind Sherlock’s audit contests and bug bounty programs. I extended and maintained them, from the React frontend to the infrastructure, CI/CD and monitoring.
Audit contests and judging
A year of audit contests on Code4rena, Sherlock, CodeHawks and Cantina: 41 findings, 19 of them High and 15 Medium, in 19 contests. I also judged contests for Sherlock, some of them as lead judge.
Escaperoomorganizer.de
A site to find and book escape rooms across different vendors and booking systems. I co-founded it and was the lead developer: a Deno backend with ElasticSearch for fast search, connectors to several booking APIs, a SvelteKit frontend and a fully automated CI/CD pipeline.
Online shop with payment integrations
An online shop for a customer, built on open source software and connected to PayPal, Amazon Pay and Klarna. I built it and still host and maintain it on a Linux VPS with nginx, Docker and Kubernetes.
Blockchain pilot in the chemical industry
A pilot project on what a private blockchain and smart contracts could do for the chemical industry, during my time at Evonik’s Digital Labs.
DefiChain anti-liquidation bot
A bot that keeps DefiChain vaults from being liquidated, built with others as a community project in early 2022. Working on it got me into DeFi, and shortly after into Solidity and smart contract security.
Emotion recognition in videos
My bachelor thesis: recognising emotions in video with neural networks, back when that still meant collecting data and training your own models.
Skills
- Languages: Python, TypeScript / JavaScript, Go, Rust, Solidity, Bash / zsh, PowerShell
- Security: Smart contract auditing, audit scoping and staffing, Web3 and Web2 bug bounties, web app penetration testing, vulnerability management, secure SDLC / DevSecOps
- Smart Contracts: Solidity, Vyper, EVM (geth, Lighthouse), Foundry, Hardhat, Certora Prover, Echidna, Hyperledger Fabric
- AI / ML: LLM products on Anthropic and OpenAI models, automated judging with AI, APIs for AI agents; TensorFlow, Keras, NumPy, scikit-learn
- Web & Backend: React, Svelte / SvelteKit, Angular, Express.js, Deno, REST / OpenAPI, OAuth2 / Keycloak, PostgreSQL, ElasticSearch, Redis
- DevOps & Cloud: Docker, Docker Swarm, Kubernetes, Rancher, Proxmox, Terraform, GitHub Actions, GitLab CI, Azure DevOps, GCP, AWS, Azure, Cloudflare, Grafana
- Infrastructure: Linux / Unix / BSD, Windows Server and clustering, MS SQL Server clusters, NetApp, VMware vSphere, HPE ProLiant, Cisco UCS
- Testing: Playwright, Cypress, Selenium, Pytest
- Languages (spoken): German (native), English (fluent)
Experience
Core Team Contributor, Sherlock
Contract · Remote
Started as Internal Security Specialist: internal security, audit scoping and staffing, and the technical side of sales conversations. From July 2025 Full-Stack Developer, building Sherlock AI and the Sherlock Audit Engine and maintaining the contest and bug bounty platforms.
Web3 Security Researcher, freelance
Private smart contract reviews, audit contests on Code4rena, Sherlock, CodeHawks and Cantina (41 findings, 19 High and 15 Medium, in 19 contests), contest judging for Sherlock, and Web2 and Web3 bug bounties.
Freelance Full-Stack Developer & Web Host
Germany
Websites and web applications for several customers, plus hosting and maintenance. Vue.js, WordPress, Svelte, nginx, Docker, Kubernetes.
Full-Stack Developer, Digital Labs, Evonik Industries AG
Hanau, Germany
Prototypes and MVPs for internal customers in Node.js, Go, Python and Svelte on a microservice architecture. DevOps for apps and ML models, vulnerability management, improvements to the secure development process, and a pilot project on blockchain in the chemical industry.
Co-Founder & Lead Developer, Escaperoomorganizer.de
Booking platform for escape rooms across vendors. Deno, ElasticSearch, SvelteKit, Go (see Projects).
System Engineer, Evonik Industries AG
Frankfurt, Germany
Designed and ran datacenter infrastructure: Windows Server and clusters, NetApp, VMware vSphere, Cisco UCS, Veeam. Automated a lot of it with PowerShell.
Education
B.Sc. Computer Science, Wilhelm Büchner Hochschule
Thesis: Emotion Recognition in Videos using Neural Networks.