01 · /erc20-tokenSeries I · Foundations
ERC-20 Token
A supply-capped token with mint, burn, pause and gasless EIP-2612 permits.
- ERC-20
- EIP-712 signatures
- Access control
27 dApps on the Sepolia testnet
27 protocols.Built from zero.Live on Sepolia.
Every smart contract here is written from scratch, with no OpenZeppelin and no libraries. Each one has unit, fuzz and attack tests, a deploy script and its own dApp that you can use right now.
- live dApps
- 27
- tests passing
- 838
- external libraries
- 0
- series, easy to hard
- 5
Each dot is one dApp, from 01 to 27. A bigger dot has more tests.
The dApps
Open any of them. They are live.
Every card opens a working app on the Sepolia testnet. You can read everything without a wallet. Connect one to send transactions.
02 · /crowdfundSeries I · Foundations
Crowdfunding
Kickstarter-style campaigns from a factory: pledge, then claim or refund, with a platform fee.
- Factory pattern
- Pull payments
- Reentrancy defense
03 · /multisigSeries I · Foundations
MultiSig Wallet
A Gnosis-style N-of-M treasury that runs any call after enough owners approve.
- Multi-party approval
- Execution order
- Replay safety
04 · /escrowSeries I · Foundations
Escrow Service
Buyer and seller escrow with fees, and an arbiter who can split the funds.
- State machine
- Dispute resolution
- Fee accounting
05 · /nftSeries I · Foundations
NFT Collection
ERC-721 from scratch with a Merkle whitelist, royalties and a reveal.
- ERC-721 internals
- Merkle proofs
- ERC-2981 royalties
06 · /stakeSeries II · DeFi mechanics
Staking Rewards
Synthetix-style rewards that grow every second you stake, with a live ticker.
- Reward accumulator
- Checkpoints
- O(1) rewards
07 · /vestingSeries II · DeFi mechanics
Token Vesting
Cliff and linear vesting schedules that the owner can revoke.
- Unlock curves
- Revocation math
- Time logic
08 · /dexSeries II · DeFi mechanics
AMM DEX
A Uniswap-V2-style factory, pairs and router, with flash swaps.
- x·y=k math
- LP accounting
- Multi-hop routing
09 · /daoSeries II · DeFi mechanics
DAO Governance
Snapshot voting power, quorum and on-chain execution of proposals.
- Checkpoints
- Quorum math
- Flash-loan defense
10 · /lendSeries II · DeFi mechanics
Lending Protocol
Borrow against collateral, pay interest, and get liquidated when the health factor drops.
- Health factor
- Compound interest
- Liquidations
11 · /hoaSeries III · Real-world law
Owners Association
Dubai Law No. 6 of 2019 on-chain: unit registry, service charges, board and veto.
- Area-weighted votes
- Statutory quorums
- Reserve treasury
12 · /estateSeries III · Real-world law
Estate Tokenization
DLD/RERA property shares with KYC, rental income and a maintenance reserve.
- Payout epochs
- Maintenance reserve
- Compliance freeze
13 · /waqfSeries IV · Islamic finance
Waqf Endowment
A corpus that can never be spent. Only its income goes to charity.
- Corpus invariant
- Donor governance
- Nazir board
14 · /varaSeries IV · Islamic finance
VARA Treasury
Regulated custody: segregated funds, KYC limits and a capital reserve.
- Reserve rules
- Tier risk limits
- Emergency drain
15 · /sukukSeries IV · Islamic finance
Sukuk Vault
Ijarah sukuk: certificates backed by a leased asset, with Shariah-approved profit.
- Shariah income gate
- Profit epochs
- Face-value redemption
16 · /takafulSeries IV · Islamic finance
Takaful Insurance
Mutual insurance pools with a claims committee and a no-claim surplus.
- 2-of-3 approvals
- Qard hasan bridge
- Surplus snapshots
17 · /murabahaSeries IV · Islamic finance
Murabaha Finance
Cost-plus trade finance with a disclosed markup, installments and charity late fees.
- Charity late fees
- Early-payment rebate
- State machine
18 · /zakatSeries IV · Islamic finance
Zakat Engine
Nisab and hawl, 2.5 percent, and the eight asnaf of Quran 9:60.
- Ring-fenced fund
- 2-of-3 committee
- Wealth snapshots
19 · /mawaridSeries V · Full platforms
Mawarid RWA
9 contractsTokenized real estate end to end: issuance, exchange, rent, governance and insurance.
- Phased subscriptions
- Order book
- Reserve floors
20 · /tamweelSeries V · Full platforms
Tamweel Credit
10 contractsA complete digital bank: deposits, credit lines, loans, auctions and governance.
- EMA oracle
- Per-second interest
- Credit scores
21 · /sahmSeries V · Full platforms
Sahm Exchange
11 contractsAn exchange with an order book, AMM pools, leveraged margin and circuit breakers.
- Price-time matching
- Funding + liquidations
- Circuit breakers
22 · /rahalaSeries V · Full platforms
Rahala Payments
12 contractsCross-border payments: FX, escrow, invoice factoring, netting and arbitration.
- Travel rule
- EMA FX rates
- Batch netting
23 · /huwiyyaSeries V · Full platforms
Huwiyya Identity
10 contractsDecentralized IDs, verifiable credentials, selective disclosure and recovery.
- Merkle disclosure
- Reputation decay
- Guardian recovery
24 · /silsilaSeries V · Full platforms
Silsila Supply Chain
12 contractsPurchase orders, shipment tracking, quality checks and milestone payments.
- Proof of delivery
- Milestone escrow
- Delivery reputation
25 · /damanSeries V · Full platforms
Daman Insurance
12 contractsActuarial pricing, claims, parametric payouts, reinsurance and surplus.
- Risk-class pricing
- Oracle payouts
- Mutual surplus
26 · /ataaSeries V · Full platforms
Ataa Giving
10 contractsZakat on 7 asset classes, sadaqa, campaigns, sponsorships and donor tracking.
- Multi-class zakat
- FIFO provenance
- Monthly pledges
27 · /taqaSeries V · Full platforms
Taqa Energy
12 contractsRenewable-energy certificates, carbon credits and peer-to-peer energy trading.
- Auditor-attested mint
- Certificate exchange
- No double retirement
No dApp matches this search.
The path
Five series, easy to hard
Each series builds on the one before. It starts with one contract and ends with platforms of 9 to 13 contracts.
- I01–05 · 5 dApps Foundations Tokens, crowdfunding, multisig, escrow and NFTs. One contract each, and the wallet basics.
- II06–10 · 5 dApps DeFi mechanics Staking, vesting, an AMM, a DAO and lending: yield, swaps and governance.
- III11–12 · 2 dApps Real-world law Dubai's owners-association law and DLD/RERA property shares, written as code.
- IV13–18 · 6 dApps Islamic finance Waqf, VARA custody, sukuk, takaful, murabaha and zakat, with committee approvals.
- V19–27 · 9 dApps Full platforms Nine complete platforms with 9 to 13 contracts each, from banking to energy.
The bars show the number of tests in each series (838 in total). Click a series to see its dApps.
The method
Five steps for every contract
The same routine an auditor uses, applied to my own code before anyone else can attack it.
Write down the invariants
What must never break: supply caps,
x·y ≥ k, safe pull payments, quorum math, a waqf corpus that never shrinks.Review by hand
Reentrancy, who can call what, rounding direction, denial of service, flash-loan and MEV risk, storage layout.
Test automatically
Foundry unit and fuzz tests with 256 random runs each, time travel with
vm.warpand signed messages withvm.sign.Attack it
Write the exploit and prove that the guard stops it: reentrancy attacks in 02 and 04, flash-loan vote buying in 09.
Report
Each finding gets a severity, an exploit scenario, a fix and a test that keeps it fixed.
$ forge test --summary[PASS] testFuzz_MintNeverExceedsCap · 01 erc20-token · 256 runs[PASS] test_Refund_ReentrancyBlocked · 02 crowdfunding[PASS] test_Release_ReentrancyBlocked · 04 escrow[PASS] testFuzz_ClaimNeverPaysMoreThanVested · 07 vesting · 256 runs[PASS] testFuzz_SwapNeverBreaksInvariant · 08 amm-dex · 256 runs[PASS] test_Vote_SnapshotPreventsFlashVoteBuying · 09 dao[PASS] testFuzz_BorrowNeverExceedsLtv · 10 lending · 256 runs[PASS] test_EmergencyDrain_GuardianOnly · 11 owners-association…Ran 27 test suites: 838 tests passed, 0 failed
Real test names from the repository. GitHub Actions runs forge build and forge test on all projects for every push.
- Solidity 0.8.26
- Foundry 1.5.1
- ethers.js v6
- ERC-20
- ERC-721
- ERC-2981
- EIP-2612
- EIP-712
- GitHub Actions
Live status
Is every dApp up right now?
When this page opens, your browser asks each dApp if it is up. Green means it answered.
- 01erc20-token–
- 02crowdfund–
- 03multisig–
- 04escrow–
- 05nft–
- 06stake–
- 07vesting–
- 08dex–
- 09dao–
- 10lend–
- 11hoa–
- 12estate–
- 13waqf–
- 14vara–
- 15sukuk–
- 16takaful–
- 17murabaha–
- 18zakat–
- 19mawarid–
- 20tamweel–
- 21sahm–
- 22rahala–
- 23huwiyya–
- 24silsila–
- 25daman–
- 26ataa–
- 27taqa–
Each check calls /api/health.php of the dApp. The smart contracts themselves run on the Sepolia testnet.
Try one
What happens when you press a button
Every dApp works the same way. Nothing here uses real money.
Connect a wallet
MetaMask on Sepolia. Without a wallet you can still read everything.
Press a button
Approve, then send the action. You sign it in your wallet.
The contract runs
It checks the rules, changes the state and emits events. A broken rule reverts.
Verified on-chain
Every transaction links to Sepolia Etherscan.
The dApp updates
Balances, charts and state come fresh from the chain.
01
Get a wallet
Install MetaMask or another browser wallet.
02
Switch to Sepolia
The badge in each dApp must show “Sepolia Testnet”.
03
Get test ETH
Take free Sepolia ETH from a faucet for gas. The demo tokens come from the dApp itself.
04
Read “How to use”
Each dApp explains its flow at the bottom. Then press the buttons.
Work with me
Need an audit or a new protocol?
The same care you see on this page, for your project. Tell me what you need, and I answer by email.
-
Request this
Smart-contract audit
A full security review of your contracts before they go live.
-
Request this
New protocol
Smart contracts for your idea, written from scratch and tested like an audit.
-
Request this
dApp or full project
The contracts plus the web app your users need, ready to run.
Every request goes straight to my inbox, and I answer by email.
