I test the systems that move money: crypto exchanges, custodial wallets and payment APIs. Access control on withdrawal flows, account-takeover chains, payment logic, secrets in client bundles. 200+ targets assessed since 2021. Every report ships with a working PoC and a CVSS vector. Coordinated disclosure only.