A Solana program that enforces whitelist-based access control on token transfers using the SPL Token 2022 Transfer Hook interface. Only addresses added to the whitelist by the admin can transfer tokens. Each whitelisted address gets its own PDA account for O(1) lookup during transfer validation.
A two-party token escrow program built with Anchor. The maker deposits Token A into a PDA-controlled vault and specifies how much of Token B they want in return. A 5-day time lock is enforced after escrow creation before a taker can accept the offer, atomically swapping Token B for the vault's Token A. The maker can also cancel and reclaim their tokens via a refund instruction. Tests use LiteSVM with time travel (warp) for fast, in-process Solana program testing without a local validator.
A whitelisted token vault built with Anchor and Token-2022. Only admin-approved users can hold and transfer the vault token - every transfer_checked triggers the on-chain transfer hook, which validates the sender against a PDA-based whitelist for O(1) lookup. Deposit and withdraw use a paired-instruction pattern (ledger update + transfer_checked in one atomic transaction) to work around Solana's reentrancy restriction and uses Instruction introspection to transfer amount verification. Withdrawals use a delegate approval so the hook always checks the user's whitelist rather than the vault PDA. The mint includes TransferHook, MetadataPointer, and TokenMetadata extensions. Tests use LiteSVM for fast, in-process testing without a local validator.
Without ER: Integrated MagicBlock VRF on Solana base layer using the standard oracle queue and a two-step request/callback flow to write verifiable randomness into user state.
With ER: Reimplemented the same VRF flow inside a MagicBlock Ephemeral Rollup using delegated state and the ephemeral oracle queue for lower-latency, lower-cost randomness consumption.
A Solana program that automates regular VRF requests using the TukTuk scheduling protocol. An agent is initialized with a VRF request template via CPI to the VRF program’s create_vrf_context. TukTuk crankers then trigger request_randomness on schedule, the VRF oracle fulfills the request off-chain, and the random result is delivered back into the program through callback_from_vrf. The system was deployed and tested end-to-end on devnet. It also includes a Sweep Threshold mechanism for an AMM, using TukTuk to automate threshold-based execution.
A Solana program that queries an on-chain AI oracle (powered by MagicBlock) and schedules those queries automatically using TukTuk. An agent is initialized with a system prompt via CPI to the oracle's create_llm_context. TukTuk's crankers automatically fire interact_with_llm on a schedule, the oracle processes the query off-chain via GPT, and calls back into the program with the response via the callback_from_llm instruction. Deployed and tested end-to-end on devnet.
A generic storage system in Rust that serializes and deserializes data using three different formats: Borsh, Wincode, and JSON. Built around a Serializer<T> trait and a Storage<T, S> container that stores raw bytes internally and uses PhantomData<T> for zero-cost type tracking. Demonstrates generic traits, associated type constraints (Src = T, Dst = T), higher-ranked trait bounds (for<'a>), and the difference between Deserialize<'de> and DeserializeOwned.
A two-party token escrow program built with Pinocchio -- no Anchor, no allocator, no std. The same make/take/cancel logic is implemented twice: an unsafe variant that parses instruction data with manual u64::from_le_bytes byte indexing and reads account state via raw pointer casting, and a wincode variant that uses #[derive(SchemaRead)] for schema-driven deserialization. Both variants are benchmarked side by side in a LiteSVM test that prints a CU comparison table. The unsafe variant is cheaper on make by roughly 1500 CUs due to SBPF-native byte load instructions; take and cancel are within 20 CUs of each other.
A token fundraising program built with Pinocchio - no Anchor, no allocator, no std. A maker creates a fundraiser specifying a target token and amount, contributors deposit into a shared vault, and the maker claims the full balance once the fundraiser ends. Contributors can refund their share at any time.
An NFT staking program built with Anchor on top of Metaplex Core (mpl-core). Users stake NFTs from a managed collection, which freezes them via the FreezeDelegate plugin and starts accruing reward tokens at a configurable rate per day. Stakers can claim rewards without unstaking, or burn their staked NFT early for a bonus payout (Burn-to-Earn). The collection tracks a live total_staked counter stored directly in the collection's Attributes plugin, updated on every stake, unstake, and burn. An external Oracle plugin adapter gates all NFT transfers to a 9AM-5PM UTC window - a permissionless crank updates the oracle's approval/rejection state and pays out REWARD_LAMPORTS to the caller when triggered at exactly the window boundaries. Deployed and tested end-to-end on devnet.