Mostafa Mahdi — Curriculum vitae.
me@mostafa.dk · +45 93 60 70 04 · Copenhagen, Denmark · linkedin.com/in/mostafa-mm
Profile
At 10 I earned my first Bitcoin. At 15 I was bypassing SSL pinning on mobile apps. At 16 I reported a critical vulnerability in the Danish Railways. At 20 I shipped the first non-custodial MPC wallet for an entire blockchain network. Computer Science student at the University of Copenhagen with production experience across cybersecurity, blockchain engineering, firmware reverse engineering, and full-stack development. Self-taught from day one. MIT xPRO and Google Cybersecurity certified.
Core competencies
- Cybersecurity
- Vulnerability assessment, penetration testing, supply-chain security, secure coding, OPSEC
- Development
- TypeScript, Python, Java, C#, Rust, Swift, Node.js, React, Express, MongoDB, REST APIs, CI/CD, Agile
- Blockchain
- MPC wallet architecture, UTXO-based systems, smart contracts, crypto integrations, DeFi
- Reverse Engineering
- Firmware analysis, binary patching, protocol dissection, competitive product teardowns
- Research
- Cryptographic algorithms (RSA, Miller–Rabin), atmospheric physics modeling, Monte Carlo simulation, OSINT
- Hardware & IoT
- EKG monitors, EHR systems, enterprise networking, cellular IoT, firmware analysis
- Leadership
- Advisory board experience, cross-functional team leadership, stakeholder management
Professional experience
Advisory Board Member
Sep 2025 – Apr 2026- Strategic guidance on content development, platform features, user experience
- Collaborated directly with Editor-in-Chief on content strategy and platform direction
- Delivered actionable feedback that led to concrete platform changes — upgraded recommendation algorithm, refined personalization, reduced over-indexing on reality formats
- Insights on market trends and user preferences for 2026 content investment
Founding Web3 Engineer & Security Lead
Jun 2024 – Oct 2025- Architected and built the first non-custodial MPC wallet for Kaspa, supporting multi-chain on a UTXO-based model
- Designed a high-performance Twitter scraper coupled with a RAG-based AI model for real-time market sentiment
- Built secure, high-throughput Node.js APIs and data pipelines; reverse-engineered competitor wallets to inform product
Information Security Analyst
Mar 2024 – May 2024- Continuous security audits — uncovered BGP route hijacking vectors and database exfiltration paths
- Engineered Proof-of-Work-based abuse prevention and robust cryptographic key management
- Reduced third-party dependency footprint while hardening security posture
Technology & Operations Manager
May 2020 – Present- Architected enterprise-grade network with WiFi 7, cellular failover, IoT-integrated smart climate control
- Engineered custom management system + competitive intelligence scrapers for dynamic pricing
- Directed full-scale digital transformation and technical renovation
Ventures & notable projects
Huawei Balong Modem — Firmware Reverse Engineering
2026- Reverse-engineered VxWorks-based cellular modem firmware (C-core and A-core) on Huawei Balong chipsets to implement remote eSIM provisioning on unsupported hardware
- Analyzed APDU command flows and SIM–modem communication protocols
Creator — Takbir.io / twilight
2025 – Present- Dawn-time calculator using Monte Carlo radiative-transfer simulations of atmospheric twilight
- Validated within ±3 minutes against real overcast observations — significantly outperforming fixed-angle methods
Founder — ProCyanol
Dec 2024 – Present- Developing science-backed topical hair-regrowth products leveraging Procyanidin B2 with custom synthesis
- R&D collaborations with cosmetic formulation experts; preparing for market entry
DSB (Danish Railways) — Responsible Vulnerability Disclosure
2020- Discovered a critical vulnerability in DSB's ticketing infrastructure that exposed the full ticket database with PII
- Reported through responsible disclosure; DSB remediated
Education
B.Sc. Computer Science
Sep 2024 – Jun 2027Higher Technical Examination Programme (HTX)
Aug 2020 – Jun 2023Certifications
- Full Stack Development with MERN — MIT xPRO · Issued Jan 2026
- Cybersecurity Professional Certificate — Google · Issued Jan 2026
- ISC2 Candidate · Issued Dec 2024
Recognition
- 3rd place regionally · Capture-the-Flag · Danish Defence Intelligence Service (FE) · top 20 nationally
- Forbes Legacy Pass · original holder · lifetime access to Forbes' private founder network
- Conference speaker / participant: TOKEN2049, ETHDubai, Blockchain Life
- Academic showcase: EKG Monitor & Electronic Health Record system at DTU
Let's take the housing off something.
Reverse-engineering, Web3 infrastructure, firmware teardowns, consulting. I answer email inside 24 hours.