Vuk.Digital / Independent web3 operator

Build. Grow. Break.

Web3 products shipped solo with AI-agent workflows: trading tools, Telegram infrastructure, on-chain games. A growth practice built across 50+ brands since 2021, and security research that holds every finding to runnable proof.

[ Verifiable signals ]
01 / Services

What I do, end to end

S/01

Product and tool builds

Full builds shipped solo with AI-agent workflows: Telegram bots, trading dashboards, landing pages, on-chain games and internal ops tools. Recent output includes a production anti-spam system, a live Solana arcade, deployed marketing sites and an internal operations prototype for an off-chain business - from brief to deployed product.

S/02

Trading and market infrastructure

Prediction market and on-chain trading tooling: trading bots, market scanners, orderbook analytics and opportunity ranking. I build these for my own use first - a Rust trading bot built inside Polymarket's invite-only Builders Program runs live 24/7, backed by an analytics CLI that scans up to 500 live markets per run.

S/03

Smart contract security research

An AI-agent audit practice built on Auditooor, my own harness: 5,400+ detector modules across EVM, Rust, Go, Solana, Move and ZK stacks, with 130+ machine-enforced checks that kill any finding lacking a runnable proof. Active competition work on web3 audit platforms; targeted reviews by arrangement.

S/04

Growth and go-to-market

The original practice: GTM strategy, community growth and retention, content and campaign execution for web3 products. Three years agency-side (RZLT, 2021-2024) across 50+ client and partner brands, from layer-1 protocols to trading platforms and NFT marketplaces.

S/05

Community protection and operations

Telegram community protection in production: a six-layer verification gate, name and bio pattern screening, and at-scale member audits of existing groups. The GTO anti-spam stack protects 10+ live communities with a 3,800+ account shared blocklist and can audit up to 10,000 members of any group without admin permissions.

02 / Selected work

Outcome first

What each build achieved, then how it works. Anything marked live links to the production deployment.

W/01Trading

Polymarket Trading Stack

Rust, Tokio, Polymarket CLOB/Gamma, Chainlink Data Streams, TypeScript, Node

Profitable across two live accounts - accepted into the Polymarket Builders Program

A 24/7 low-latency trading system on Polymarket's 5-minute, 15-minute and 1-hour BTC / ETH / SOL / XRP up-or-down crypto markets, resolved by Chainlink oracles - a Python prototype rewritten into Rust.

The signal core detects when a coin's spot price deviates from the slot's opening price and bets that the direction holds through resolution. Latency was engineered from ~500ms to ~50ms; the final Rust rewrite signs orders in 2ms instead of Python's 15ms and eliminates 50-100ms of GC jitter outright.

Strategy discovery is systematic: 750,000+ orderbook snapshots feed regime detection and a confirmation matrix that gates entries, and a scan pipeline prunes strategy-coin combos until zero losing combos remain - then emits the deployable config.

  • Latency chain: Python subprocess -> py-clob-client SDK with persistent connections -> VPS placement against the CLOB edge -> Cloudflare Worker relay with placement pinning -> full Rust rewrite of the monitor.
  • Scan pipeline: ungated sim for the raw trade universe -> per-combo gate search -> toxic-pair scanning -> gated verification sim -> prune and re-verify until zero losing combos remain.
  • Regime detection: cross-slot outcome autocorrelation splits markets into TRENDING, MIXED and CHOPPY; the winning strategies read orderbook microstructure to catch informed flow in choppy markets, which dominate 80% of the time.
  • CLOB execution lessons: wait out Polygon's batched settlement before selling, sell 97% of shares to dodge sub-cent rounding, never fire a sell while a live order is resting.
  • Fact-check tooling: a script rebuilds any trader's complete on-chain history to debunk fabricated PnL screenshots - published as X Community Notes, one of which landed on a 1M-impression post.

Behind it sits the analytics layer: a TypeScript market-analytics CLI scanning up to 500 live markets via the Gamma and CLOB APIs for spreads, mispricings and opportunity ranking - strategy research across all markets.

Direction: a strategy vault - users deposit, and the optimized strategies run in the background.

Polymarket Builders Program Track record / @vuk5minmarkets
W/02On-chain game

Great Teacher Onizuka Arcade

React, TypeScript, @solana/web3.js, Helius RPC, Vercel KV, Pusher

Live - greatteacheronizuka.com

Solana-native anime arcade with $GTO and SOL wagering across seven games.

A wagering arcade on Solana mainnet: Phantom wallet connect, stake escrow, Helius RPC, Pusher real-time PvP and automated payouts, alongside a 10-tier token faucet and 174 generated character pages. OniBaku Showdown runs the full on-chain flow in production.

7 games / $GTO + SOL wagering
W/03Protection

GTO Anti-Spam Bot

Python, python-telegram-bot, Telethon, Turso, Vercel, React, Tailwind

3,800+ flagged accounts on the shared blocklist - 10+ live communities protected, free

Production Telegram verification bot guarding crypto communities from spam and scams - communities on the same preset share one blocklist, a shared immune system.

Every join attempt runs a six-layer verification gate: global blocklist cross-reference, GeoIP country captured server-side by a Telegram Mini App, phone-registration country via MTProto, display-name regex against admin and official impersonation, bio scan for shill keywords and link patterns, and Telegram's own report_spam signal. First failed check is an instant ban with full metadata; a clean pass gets a single-use invite link.

The blocklist powers a public threat-intelligence dashboard: an interactive visualization with a live network map of how spam clusters connect across communities, threat categories and blocking velocity.

  • 3,800+ flagged accounts on the global blocklist, 2,800+ inactive accounts tracked, 4,400+ bios scanned and stored.
  • /audit needs no admin: scans up to 10,000 members of any group; a search-iteration trick breaks the API ceiling to reach 40,000+ members of a 100k group.
  • /clean 4-pass admin sweep: quick checks, Telethon bio scan, restricted users and ban-list import.
  • Per-community presets: JSON config per community - shared blocklist within a preset, isolated blocklists across presets.
W/04Security

Auditooor

Python, Bash/Make, Model Context Protocol, multi-agent orchestration (Claude, Codex, Kimi, MiniMax), Slither/Glider, Foundry

Proof-gated findings

Solo-built AI security audit stack: 5,400+ detectors, an MCP memory server and machine-enforced proof gates.

An operator-run harness that orchestrates multiple AI coding agents through a canonical audit pipeline: detector scans, commit mining, exploit conversion and a strict completion gate. Detector modules span EVM, Rust, Go, Solana, Move, Vyper and ZK frameworks; 130+ codified pre-submission checks fail closed unless a finding carries a runnable proof. 1,060 commits in its first three weeks of development.

130+ proof gates No runnable PoC, no finding
[ Client builds ] 3 builds - anonymized, client names withheld
C/01Web / 3D

3D Product Site for a Germany Integration Platform

React 19, Three.js, @react-three/fiber, @react-three/drei, @react-three/postprocessing, Framer Motion, Vite, TypeScript, GitHub Actions, GitHub Pages

Immersive React 19 + Three.js landing site shipped for a Germany-based digital onboarding platform

A futuristic, single-page product website built with React 19, Three.js, and @react-three/fiber, serving as the public face of a digital onboarding platform that helps refugees, international students, and skilled workers integrate into Germany. The site features a deep-space dark palette with pastel bloom effects, Framer Motion transitions, and a multi-section architecture covering housing, jobs, white-label banking, and verified identity onboarding. Deployed to GitHub Pages via a GitHub Actions CI/CD workflow.

  • Full 3D canvas hero with bloom and vignette post-processing via @react-three/postprocessing.
  • Multi-space product architecture: housing, jobs, white-label banking, and verified identity onboarding.
  • IDnow-style 4-step verification flow gating access to all platform spaces.
  • Automated CI/CD deployment to GitHub Pages on push to main.
Shipped
C/02OCR / PWA

Mail sorting assistant for national postal operator

Vanilla HTML/JS (no build step), Tesseract.js 5 German OCR, static per-PLZ JSON address sheets, Levenshtein fuzzy street matching, Canvas API preprocessing, Vercel

Camera-based OCR tool that reads envelope addresses and instantly shows the correct sorting shelf

A mobile-first progressive web app built for postal sorting staff. A worker points their phone camera at an envelope, the app uses Tesseract.js OCR to extract the address (postal code, street, house number), fuzzy-matches it against per-district delivery-zone tables, and displays the shelf number in large text as immediate visual feedback. All lookup runs fully in-browser - no server round-trip required.

  • Dual Tesseract worker pool halves perceived OCR latency by processing frames in parallel.
  • Qualifier-aware fuzzy matcher (Grosse/Kleine prefix clash penalty) prevents wrong-street hits.
  • Fully offline-capable after first load - all data fetched via force-cache, no backend dependency.
  • 14 postal districts covered with per-street odd/even house-number range tables.
Prototype
C/03Internal ops

Internal Operations Platform for a Private Security Firm

React 19, TypeScript, Vite, Tailwind CSS v4, Radix UI, Framer Motion, dnd-kit, Recharts, React Hook Form, Zod

Full-fidelity ops prototype replacing WhatsApp/spreadsheet coordination with a mobile-first workforce system

A Notion-style internal operations platform designed and prototyped for a fast-growing private security firm. Covers the full shift lifecycle - scheduling, staffing, sick leave, incident reporting, announcement confirmations, and a live ops dashboard - split across a mobile employee app and an admin/dispatcher web interface. Delivered as a functional React/Vite prototype with a complete AI-assisted design brief pack used to drive screen generation.

  • 16 fully implemented screens across employee mobile flows and admin desktop flows.
  • Role-based architecture: Employee, Team Lead, Dispatcher/Admin, Super Admin with scoped data access per role.
  • Structured design brief pack: 7 global strategy/IA/design-system documents plus per-screen AI prompts.
  • German-language copy layer for the client's home-market deployment.
Prototype
[ Now / in progress ] Active research - public benchmark still live
[ NOW ]Quantum research

Reversible Quantum Circuit Optimization for secp256k1 Point Addition

Rust, reversible / quantum circuit design, secp256k1 elliptic-curve arithmetic, Toffoli + qubit resource estimation, modular-inverse (binary GCD) circuits

Drove a reversible secp256k1 point-add circuit below the published cost frontier - still optimizing

An entry in a public quantum-computing benchmark: build the cheapest reversible circuit that performs one elliptic-curve point addition on secp256k1, scored by Toffoli-gate count times peak qubit width (lower is better). The circuit must pass strict reversibility, phase-cleanliness, and hash-derived correctness checks, so cost can only come from genuinely better arithmetic - not shortcuts.

Active research: a locally validated circuit has pushed the cost below the benchmark's published reference frontier, with a deeper structural rewrite of the modular inverse still in progress.

  • Reframes a quantum resource-estimate primitive (Shor's inner loop against ECC) as a head-to-head optimization benchmark.
  • Optimizes gate count and qubit width jointly under strict reversibility, uncomputation, and phase-cleanliness validation.
  • Validated on thousands of hash-derived test points, so a circuit cannot be overfit to a fixed test set.
  • Builds on publicly released academic resource-estimate code, reproduced as a small, dependency-light Rust harness.
In progress Score withheld while benchmark is live
50+ client and partner brands worked across during the RZLT agency years, 2021-2024
5,400+ detector modules in Auditooor, a solo-built AI security audit stack
500 live prediction markets scanned per run by the Polymarket market-analytics CLI
3,800+ flagged accounts on the anti-spam bot's shared global blocklist, protecting 10+ live Telegram communities
03 / Brands

Clients, partners, awards

[ Independent ] 21 brands
  • Great Teacher Onizuka
  • Trojaan
  • Bags
  • Cytonic
  • Rentcoin
  • pump.fun
  • Via Network
  • 4meme
  • BullX
  • Nimbora
  • Blastr
  • Sol Shitters
  • WTFRS
  • Juneo
  • NFT Magicians
  • Belgrade Crypto
  • DojoSwap
  • Neroli
  • Master Tattoo
  • MetaTrace
  • UIUX
[ With RZLT - 2021-2024, clients and awards ] 36 logos
  • eesee
  • Delta Reality
  • ALL.ART
  • Sui
  • BlockSplit
  • Cometh
  • CryptoTask
  • Exclusible
  • IBC Media
  • Hypersign
  • Hypermine
  • Homeport
  • Intel
  • ICP Balkans
  • IBetYou
  • JoomBoos
  • LimeChain
  • NEAR
  • Ready Player Me
  • Nouns
  • NEAR Balkans
  • Samsung
  • RIT
  • SolSea
  • Styria Media
  • Zumer
  • amp.net
  • VR ALL ART
  • Definition8
  • MetaSlavs
  • eSync
  • aeternity
  • Filmio
  • NAI Awards
  • IdejaX
  • IAB
04 / About

From growth side to build side

Illustrated portrait of Vuk Tanaskovic
[ Vuk Tanaskovic ] Vuk.Digital / solo operator
One rule covers all of it: every claim, finding or growth number gets proven or dropped.

I spent 2021-2024 agency-side at RZLT, working growth and marketing across 50+ web3 client and partner brands - layer-1 protocols, trading platforms, NFT marketplaces, consumer tech. Since going independent I have become the thing I used to market: a builder.

I ship solo with AI-agent workflows - a Rust trading bot running live 24/7 inside Polymarket's invite-only Builders Program, a production Telegram anti-spam system guarding live crypto communities, a Solana arcade with token wagering, and Auditooor, an AI audit harness with 5,400+ detectors that powers my security research on competitive audit platforms.

2021-2024

RZLT / Growth and marketing

Contributing across 50+ web3 client and partner brands, from layer-1 protocols to trading platforms and NFT marketplaces.

2024-now

Independent operator

Accepted into the Polymarket Builders Program, with a Rust trading bot live 24/7; shipped a production Telegram anti-spam system and a live Solana gaming platform; built Auditooor, a solo AI security audit stack now driving active vulnerability research on competitive web3 audit platforms.

06 / Contact

Let's talk.

One operator across build, growth and security research. If something above fits what you need, the fastest route is a direct message.

Direct line - the person you message is the person who ships.