0xSacha

Sacha Graff

DeFi Risk Curator & Vault Engineer

I've always been obsessed with vaults: the one DeFi primitive where architecture, trust, and risk all have to work together perfectly. I build them end-to-end, and curate the risk that decides what's safe to hold inside:

  • Quantitative risk scoring and protocol due diligence.
  • Smart contracts: Cairo, Solidity, cross-chain vault architecture.
  • Internal tooling: dashboards, monitoring, and alerting.
  • Background infrastructure: indexers, relayers, and reconciliation jobs.
  • Cross-chain governance infrastructure.
  • End-to-end ownership, from architecture to production.
$40M+Peak TVL, products & infra I built
$0Losses from curation or infra
80Protocols scored
6Products shipped
15/8/6%Realized APY since inception (USDC/ETH/WBTC)
Risk Curation & Underwriting

Risk isn't a constraint on craft. It is the craft.

  • Designed Hallmark: strategy qualification criteria, eligibility cutoffs, and exposure caps across 80 protocols, 71 assets, 47 strategies.
  • Zero security incidents, zero material losses across $40M+ deployed through my products and infrastructure.
  • Operational discipline end to end: real-time monitoring wired to emergency exits, plus incident runbooks for exploits, depegs, and bridge failures.
Quantitative Risk Structured Credit Protocol Due Diligence
DeFi Tech Lead

I ship production infrastructure, not proofs of concept.

  • Architected cross-chain ERC-4626 vaults across 7 chains (Starknet + EVM), settled through rollup-level netting and batching.
  • Built the open-source Starknet Vault Kit, in partnership with Starknet.
  • 6 DeFi products shipped since 2022, from portfolio trackers to yield aggregators.
  • Full-stack ownership: smart contracts, indexers, relayers, admin consoles, and monitoring wired to automated emergency exits.
  • Early zk-STARK work: provably-correct vault allocation with Starkware's SHARP prover.
Cairo Solidity Cross-chain
Hard Skills
DeFi vault design Quantitative risk modeling Protocol due diligence Smart contracts (Cairo, Solidity) Cross-chain vault architecture On-chain data & monitoring (Dune, Tenderly, Hypernative)
Soft Skills
Ownership mindset Risk-based decision making Governance communication Technical leadership AI-augmented workflows

ForgeYields

2025 – Present

Cross-chain yield aggregator, underwritten like structured credit. I own it end to end: risk, protocol, infra, product, growth. Built to run without single-person dependencies: runbooks for every failure mode, automated guardrails, and three independent security reviews coordinated to completion.

7Chains
$1.4MTVL (target $50M)
250+Users
3Audits
0Incidents
Protocol & Smart Contracts
Cross-chain vaults in Solidity and Cairo, audited by Cairo Security Clan and formally verified by LFG Labs. Deposit and redeem from any chain: flows are batched and netted at the rollup level, then settled on Ethereum as a single net delta, cutting gas and bridge hops. Every execution is logged in real time via the Atomic Transparency Ledger.
Infra & Monitoring
Monitoring-as-code (Hypernative) with automated alert routing and emergency exits, backed by background job orchestration (indexers, relayers, EOD reconciliation). An internal admin console drives batch order execution, manual overrides, and risk guardrails like max-loss limits. AI-assisted operations: automated yield-opportunity scanning and re-scoring triggers, human-gated before anything ships.
Cairo Solidity Foundry Next.js NestJS Hyperlane

Hallmark · The Risk Engine

2026 – Present

Most DeFi allocators pick strategies by APY and gut feel. Hallmark is my answer to that: a quantitative underwriting discipline, borrowed from structured credit, scoring every layer 1–10 before capital moves.

Chain Protocol Asset Strategy
Global Risk Score = 0.35·Protocol Risk + 0.25·Asset Risk + 0.40·Strategy Risk

Protocol and Asset Risk are themselves weighted composites of 6 and 5 criteria, spanning smart-contract, liquidity, counterparty, oracle, and market risk. Hard caps on any single criterion can exclude a strategy outright, and a watchlist band imposes manual review with capped position sizing. Scores are re-evaluated quarterly and on material events; any change cascades to every dependent strategy.

80Protocols scored
71Assets scored
47Strategies scored
v4.2Methodology version
≤7.5/10Eligibility bar

Methodology and scores are public and reproducible. Deep-dive rationale stays private, NDA-gated for institutional LPs.

Quantitative Risk Structured Credit Protocol Due Diligence Exposure Caps
Previous Experience
2025

Author · Starknet Vault Kit

ForgeYields needed a Starknet-native, ERC-4626-compliant vault primitive. Instead of keeping it closed, I open-sourced it in partnership with Starknet.

  • Open-source ERC-4626 vault infrastructure in Cairo: delayed redemptions, fee management, and Merkle-validated fund allocation.
  • Built and maintained in partnership with Starknet, for any team to build vaults on.
CairoERC-4626Open Source
View code
2023 – 2025

Co-founder & Tech Lead · Nimbora

No yield product had cracked cross-chain UX yet. I saw the opening to be first.

  • Nimbora Earn, the first product in DeFi offering cross-chain yield with single-deposit UX: ERC-4626 vaults routing into L1 strategies (Pendle, Spark) via adapters.
  • Transaction batching cut gas costs sharply, funded by management fees.
  • Nimbora Borrow, a companion liquidity market. Less traction, a valuable lesson.
CairoERC-4626Cross-chainPendleSpark
View code
2024

Contributor · Cross-Chain Governance Forwarder

Protocol governance lived entirely on Ethereum. Extending it to Starknet meant porting years of battle-tested security assumptions, not just relaying a message.

  • Built a BridgeExecutor contract (Aave-inspired) letting Ethereum-approved governance proposals queue and execute actions on Starknet.
  • Full security model ported cross-chain: timelock delay, guardian cancellation, grace-period execution.
CairoGovernanceCross-chain
View code
2023

Contributor · Yearn × Starkware

Yearn's vault weights were set manually, then rubber-stamped by a multisig. What if the best allocation could be proven correct with math, instead of trusted on faith?

  • Built StarkDebtAllocator: an Ethereum L1 contract paired with a Cairo program that computes the optimal strategy weighting and proves it correct via a zk-STARK, generated through Starkware's SHARP prover, without running the computation on-chain.
  • Fully permissionless: any proposer can submit a solution; the contract only accepts it if the proof verifies and the result beats the current best.
  • Winning proposers earned continuous rewards, streamed via Llamapay for as long as their solution stayed optimal, turning vault optimization into an open, incentivized market.
CairoSolidityzk-STARKYearn v3
View code
2022 – 2023

Founder · StarkenDeFi

Starknet DeFi had no unified way to see your positions. No wallet connect, just an address and a dashboard. I built it.

  • Portfolio dashboard tracking wallet balances, staked and deposited assets across the Starknet DeFi ecosystem. No wallet connection required.
  • Launched June 2023, among the earliest dedicated portfolio trackers in the Starknet ecosystem.
DeFiPortfolio Tracking
Community launch post
2022 – 2023

Founder · Morphine

Starknet DeFi was young and fragmented. Positions scattered across pools, no unified view. I built the tracker I wished existed.

  • One of the first advanced portfolio trackers on Starknet, indexing pool events and interest-rate models in real time via Apibara.
  • Auto-compounding vaults that reinvested yield automatically. No manual claim-and-restake.
CairoApibaraDeFi
MorphineFi on X
2022

Founder (POC) · Magnety

Non-custodial vaults still relied on multisigs and centralized front-ends. I wanted curators to act on verifiable, on-chain logic directly.

  • Vault infrastructure using Starknet's native account abstraction for non-custodial, on-chain-verified fund management.
  • Curators execute strategy actions straight from a web interface. No privileged backend in between.
CairoAccount Abstraction
Protocol writeup
2019 – 2021

Master's in Engineering, Computer Science (Diplôme d'Ingénieur)

École des Mines de Saint-Étienne

Preceded by two years of classes préparatoires (MPSI/PSI, 2017–2019), France's selective, intensive math and physics track. Mines Saint-Étienne ranks among France's top 10 engineering schools; the French Diplôme d'Ingénieur is legally equivalent to a Master's degree.