About

avatar

Varik Matevosyan

Software Engineer
mailMailgithubGitHublinkedinLinkedinxX

Hi there! I started my tech journey in 2016, building real-time multiplayer games. After that I worked in healthcare projects, creating data pipelines and working with cloud providers like AWS (Certified Developer), GCP, and Linode, then moved to web3 space working with blockchain and Solidity.

I have extensive experience with PostgreSQL and AI. I worked at Lantern for 2 years, where I wrote PostgreSQL extensions in C and Rust and built the Lantern Cloud Controlplane.

Currently I work full-time as a software engineer and also do security research in my spare time, mainly in the Apple ecosystem: private frameworks, root daemons, JavaScriptCore/WebKit and the XNU kernel. I've also worked on pois0nSword, a port of the DarkSword WebKit chain up to code execution with a PAC bypass.

Some of my findings:

  • CVE-2026-65395 - out-of-bounds write in ImageIO (Apple)
  • CVE-2026-6668 - unauthenticated DoS via integer overflow in PgBouncer's packet buffer growth

I also love playing Capture The Flag (CTF) challenges with our team Ethnical Hackers.