s0sta
EN DE NL عربي
Get in touch
5 of 5 sites online right now

Systems that stay up. Smart contracts that hold.

I'm Hosam Hani, IT Manager at Raed Sports in Riyadh. I run servers, networks, ERP and e-commerce for 600 people in 9 branches. I also write Ethereum smart contracts and test them like an attacker.

See my work Download CV

Each dot is a skill. Point at one.

Portrait of Hosam Hani
Riyadh, Saudi Arabia

About

I keep a whole company's IT running, and I build software from scratch to learn how it can fail.

I started in hospital IT support in Egypt: printers, networks and user accounts for staff who cannot wait. Today I run the full IT stack of a sports-brand distributor in Saudi Arabia: servers, network, ERP, a 1,400-product online store and security, for 600 people in 9 branches.

Next to that, I build. I wrote three business systems from scratch in plain PHP, and 27 Ethereum smart-contract protocols with 838 tests. I study real DeFi hacks to learn how systems break, so mine do not.

Based in
Riyadh, Saudi Arabia
Experience
4+ years in IT, since 2020
Languages
Arabic (native), English (advanced), German (A1, learning)
Focus
IT operations, security and smart contracts

Selected work

Real numbers from real systems.

Raed Sports, Riyadh. Since 2025

IT for 600 people in 9 branches

Servers, network, ERP, the online store and security. I own it end to end, from setup to the late-night fix.

HQ

860

DeFi exploits studied

A research archive from 2017 to 2026. Each case has the root cause, the real numbers and the lesson for the next audit.

  • Reentrancy
  • Oracle manipulation
  • Flash loans
  • Access control
  • Rounding
Open the archive (opens in a new tab)

3 business systems, built from scratch

Daem
IT help desk with SLA tracking
Idara
Manager workspace with approval chains
Sanad
Field service: dispatch, stock and invoices

Plain PHP 8, no frameworks. In English, German and Arabic.

View on GitHub (opens in a new tab)

Experience

Four roles, one habit: own the system end to end.

Download full CV (PDF)

  1. 2025 – today

    Current

    IT Manager

    Raed Sports, Riyadh, Saudi Arabia

    • Administer company servers and IT infrastructure across Linux and Windows for 600 employees in 9 branches: user accounts, access control, patching, backups and restore tests.
    • Own babolatksa.com, a bilingual Arabic and English WooCommerce store with around 1,400 products: hosting, deployments, plugin maintenance, performance and uptime.
    • Run and support the ERP system (ERPNext, Odoo, Daftara): deployment, version updates, troubleshooting and user training.
    • Manage DNS, hosting and SSL certificates for company domains, including domain migrations without downtime.
    • Respond to security incidents end to end: investigation, cleanup, system hardening and preventive controls.
    • Operate Amazon and Noon marketplace listings, product data and integrations.
    • Provide internal IT support: workstations, network, peripherals and onboarding for new staff.

  2. 2023 – 2025

    Freelance IT and Web Developer

    Remote

    • Built and maintained WordPress and WooCommerce websites for private clients, including hosting, domain and SSL setup.
    • Administered VPS environments and deployed self-hosted web applications end to end.
    • Intensive self-study in software development, Linux administration and web security.

  3. 2021 – 2023

    IT Support Specialist

    Farma Care Hospital, Cairo, Egypt

    • Maintained workstations, printers and network equipment across hospital departments.
    • Supported the hospital information system: user accounts, permissions and first-line troubleshooting for staff.
    • Diagnosed LAN and WLAN connectivity issues and coordinated hardware replacement with vendors.
    • Performed routine backups, antivirus management and software deployment.

  4. 2020 – 2021

    IT Support

    MedCare Hospital, Sharqia, Egypt

    • Provided first-line IT support for staff: hardware, operating systems, printers and network access.
    • Installed and configured workstations and peripherals, and documented recurring issues and fixes.

Skills

What I use every week, grouped the way I work.

Operating systems

  • Linux (Ubuntu, Debian)
  • Windows 10 and 11
  • Windows Server

Servers and hosting

  • VPS administration
  • Nginx
  • Apache
  • cPanel and Plesk
  • SSH hardening
  • Backups and restore
  • Monitoring

Networking

  • LAN and WLAN
  • Routers and switches
  • VLANs
  • Firewall rules
  • VPN
  • DHCP
  • DNS
  • SSL/TLS

Web and e-commerce

  • WordPress
  • WooCommerce
  • PHP
  • Performance tuning
  • Rank Math SEO
  • Amazon and Noon

ERP

  • ERPNext and Frappe
  • Odoo
  • Daftara

IT security

  • Incident response
  • Malware cleanup
  • System hardening
  • Access control
  • Patching
  • Backup and recovery
  • Penetration testing basics

Smart contracts and Web3

  • Solidity 0.8
  • Foundry
  • Fuzz and invariant tests
  • ethers.js
  • ERC-20 and ERC-721
  • EIP-2612 and EIP-712
  • Audit methodology

Scripting and code

  • Bash
  • Python
  • PHP 8
  • Git and GitHub
  • HTML and CSS
  • JavaScript

Projects

Things I designed and built myself. The code is public on GitHub.

Web3 smart-contract portfolio

27 complete protocols in five series, from a simple token to full platforms for banking, exchange, payments and identity. Every contract is written from scratch and tested the way an auditor would: unit, fuzz and invariant tests, attack proofs, deploy scripts and CI.

  1. IFoundations
  2. IIDeFi mechanics
  3. IIIReal-world governance
  4. IVIslamic finance
  5. VFull platforms
tests
838
lines of Solidity
41,000+
external dependencies
0
CI green
27/27
Code on GitHub (opens in a new tab) Live dApps (opens in a new tab)

Business systems for real companies

Three management systems, built from scratch in plain PHP 8. Each one installs with a web installer and runs on normal shared hosting.

  • DaemIT help desk

    Tickets with SLA targets, a knowledge base, reports with SLA compliance and a full audit log.

    EN · DE · AR

  • IdaraManager workspace

    Tasks with checklists, approval chains, delegation, correspondence and meetings.

    AR · EN

  • SanadField service

    Dispatch board, work orders, stock that updates itself, maintenance contracts and VAT invoices.

    EN · DE · AR

In every system: prepared statements, password hashing, CSRF tokens, login throttling and an audit log.

Code on GitHub (opens in a new tab)

DeFi exploit research archive

860 real incidents from 2017 to 2026. Each one has the date, the chain, the root cause, the attack with real numbers, and the lesson. I use it as a checklist before every audit.

incident cards
713
deep-dive analyses
147
root-cause classes
20
  • Access control
  • Reentrancy
  • Oracle manipulation
  • Flash loans
  • Price manipulation
  • Rounding and precision
  • Integer overflow
  • Infinite mint
  • Governance
  • Bridges
  • Signature validation
  • Business logic
  • Misconfiguration
  • Token logic
Read the archive (opens in a new tab) Code on GitHub (opens in a new tab)

Live status

This server checks my live sites every 10 minutes. The numbers are real.

All systems operational Last check:
  • babolatksa.comWooCommerce store

    Online

    HTTP
    200
    Response
    30 ms
    SSL
    72 days left
  • web3.s0sta.comWeb3 portal with live dApps

    Online

    HTTP
    200
    Response
    57 ms
    SSL
    88 days left
  • here2grow.edu.saSchool website and SEO

    Online

    HTTP
    200
    Response
    685 ms
    SSL
    23 days left
  • cyasseryehia.comCoach profile

    Online

    HTTP
    200
    Response
    44 ms
    SSL
    81 days left
  • deqatalharf.sastatus.sites.deqatalharf-sa

    Online

    HTTP
    200
    Response
    826 ms
    SSL
    56 days left

The checks run with PHP on this server. The history keeps the last 30 checks per site.

Certificates

  • Google IT Support Professional Certificate

    Google and Coursera

    Feb 2025

  • Ethical Hacker

    Cisco Networking Academy

    Nov 2024

  • Operating Systems Basics

    Cisco Networking Academy

    Nov 2024

  • Linux Essentials

    Cisco Networking Academy and NDG

    Oct 2024

  • Responsive Web Design (about 300 hours)

    freeCodeCamp

    Oct 2024

Need an audit or a new protocol?

I review smart contracts the way an attacker would, and I build protocols and dApps from zero, with tests from the first line.

Smart-contract audit

A full security review of your contracts before they go live.

  • Manual review and attack scenarios
  • Foundry fuzz and invariant tests
  • Report with severity, proof and fix
  • Re-check of your fixes
Request this

New protocol

Smart contracts for your idea, written from scratch and tested like an audit.

  • Design and threat model first
  • Solidity with a full test suite
  • Deploy scripts and CI
  • Testnet launch you can try
Request this

dApp or full project

The contracts plus the web app your users need, ready to run.

  • Wallet connection and live data
  • Clear UI in English or Arabic
  • Setup on your server
  • Handover with documentation
Request this

Every request goes straight to my inbox, and I answer by email. You can also write to hosamhanyaa@gmail.com.

Let's work together

Looking for an IT Manager or system administrator, or a review of your smart contracts? Write to me. I read every message.

Send a message

Project details (optional)

I only use your data to answer you. Privacy notice