Lucas VinzonProtocol & Full-Stack Engineer at Move Industries
I work on how value moves between chains: the bridge contracts, the infrastructure handling messages between them, and the frontends people put their money through.
By the numbers
- 237
- PRs authored
- 182
- PRs reviewed
- 30+
- repositories
- 0
- exploits
173 merged · Movement orgs
Movement orgs
contracts to infra
any deployment, ever
About
What I actually do
I’ve been an engineer at Movement since November 2023. The work runs the full depth of a Move-based L1: Move and Solidity contracts, Rust infra and node internals, and the TypeScript frontends above them.
I am the main maintainer for bridging and multisig security, and I set the practices those systems are held to. That covers how contracts get deployed and upgraded, and how a transaction reaches a multisig. Nothing I’ve deployed, on-chain or off, has ever been exploited.
Self-taught and self-directed. Much of what I’ve shipped started as something nobody asked for, and got finished because I wanted it to exist.
Selected work
Things I built
Owned, contributed, maintained and kept running. Write-up stands in for private repos.
Protocol
Move Timelock Module
A timelock account type for the Movement framework, forcing a delay between proposing a privileged action and executing it.
Tooling
Property-Based Fuzzing for Move
Foundry-style property-based fuzzing built directly into Move’s test attribute, with shrinking and a replayable regression corpus.
Bridge
Movement Native Bridge
The canonical Ethereum ↔ Movement bridge. I own the design, the contracts on both chains, the safety model and the standards it is held to.
Frontend
Bridge Interface
The production bridge frontend. Multi-chain routing, live balances, gas on destination, and every asset onboarding since launch.
↗ bridge.movementnetwork.xyz
Tooling
Movement Multisig
The multisig that governs Movement’s contracts and treasury. I maintain it, along with the security practice around how transactions reach it.
↗ multisig.movementnetwork.xyz
Infra
Canonical USDC & CCTP Relayer
Circle-enabled USDC on Movement: the USDCx Move module plus the Rust xReserve relayer that carries CCTP messages in production.
Frontend
Network Analytics Dashboard
The internal dashboard for network, bridge, community, and ecosystem metrics. Started it from the first commit and built it out solo.
Frontend
Movement Explorer & Movescan
Movement’s block explorer, a long-lived fork of the Aptos Labs explorer, and its successor, Movescan.
↗ scan.move.money
Infra
Testnet Faucet & Discord Bot
The faucet every Movement developer uses to get testnet funds, plus the Discord bot version. Mine from the first one onward.
↗ faucet.movementnetwork.xyz
Protocol
Nora BRS Stablecoin
The cross-chain contract for Nora’s BRS stablecoin, built on LayerZero V2. Sole author of the EVM side.
↗ nora.finance
Frontend
Parthenon
Movement’s quest and XP campaign platform, the user-facing funnel for ecosystem participation.
Governance
Movement Improvement Proposals
The specification track, where the bridge design, the upgradeability model and the feature-flag policy were argued out before any of them shipped.
Infra
Security Operations & Runbooks
The operational half of security: the procedures people follow during an incident, and the privileged transactions that change production.
Tooling
Movewright
Browser-automation test harness for Movement wallet flows, so bridge and multisig E2E tests can click through a real wallet extension. Created it from the initial commit.
Frontend
Movement Design System
A shared component and token library so the bridge, multisig, staking, and faucet apps stop diverging.
Tooling
Upstream & Open Source
Contributions upstream of Movement, and the tools I build for myself.
Earlier
Before protocol engineering
DeFi, NFT and social-fi work from before Movement, where I learned to ship contracts that hold other people's money.
Earlier
Degis
A DeFi insurance protocol, and where my Solidity testing discipline came from.
Earlier
smolmints
An NFT launchpad with a bespoke contract per collection, run so non-technical artists never had to touch the machinery.
Earlier
Tokyo Rebels
An animated NFT collection launched to un-rug a community whose previous project stole three million dollars from it.
Earlier
Pro Arena
An analytics platform for the StarsArena social-fi ecosystem, showing what the platform itself wouldn’t. I ended up helping stop a live hack on it.
Experience
Where
Move Industries / Movement Labs· Protocol & Full-Stack Engineer
Nov 2023 - presentJoined before testnet and stayed through mainnet and the move to Move Industries. I own the native bridge end to end: the specification, the contracts on both chains, the deployment pipeline, the frontend and the production runbooks. I also own canonical USDC, the multisig, and most of the developer-facing surfaces on top.
- Main maintainer for bridging and multisig security. I set the practices those systems are held to, and nothing I’ve deployed has ever been exploited.
- Currently landing a timelock module and property-based fuzzing into the Movement framework.
- Designed and built the Ethereum ↔ Movement native bridge, from the MIPs through the contracts on both chains.
- Built its safety model: rate limiting, counterparty verification, refunds, access control and timelocks.
- Built the contract deployment pipeline and the timelock deployment framework.
- Upgraded MOVE to a LayerZero OFT on a live token.
- Built the USDCx Move module for canonical USDC, through internal audit.
- Built and ran the CCTP xReserve relayer in Rust.
- Maintain Movement Multisig, and own the privileged transactions that change production.
- Built and maintain the bridge interface.
- Maintained Movement’s explorer fork, then built its successor, Movescan.
- Owned the testnet faucet and its Discord bot.
- Built the internal network analytics dashboard from its first commit.
- Authored the SRE runbooks, and stood up the original health checker and multi-region infra.
- Authored the governance behind the bridge, upgradeability, fees and feature flags: MIP-18, MIP-27, MIP-58, MD-14/17/21/30/81.
- Drafted the shared Movement design system.
MoveSolidityRustTypeScriptFoundryNext.jsDockerAWSTerraformNora Finance· Smart Contract Engineer
2026Cross-chain token infrastructure for BRS on EVM.
- Sole author of the BRS OFT ERC-20 contract for LayerZero V2 cross-chain messaging, including the CI security pipeline.
SolidityLayerZero V2FoundryIndependent· Full-Stack Web3 Developer
2021 - 2023Contracts and products across DeFi, NFT and social-fi ecosystems. I picked up my working habits here: writing the tests, reading other people’s contracts before they went out, and staying responsible for things after deploy.
- Built Molek, an NFT marketplace with a custom non-custodial trading contract that reclaimed royalties from abandoned projects, themed and shipped end to end.
- Built Shinies, collective ERC-1155 staking that let players pool collectibles and earn bonus emissions as a group, with claims settling immediately on stake and withdraw.
- Wrote a family of Arkiver-based indexers for Molek, Swop and Stars Arena, and migrated one to Express and MySQL mid-flight when it outgrew the original stack.
- Wrote ManaT, an on-chain mint automation bot, and built airdrop, staking and potion contracts across several collections.
- Contributed to rabblerabble, a wagering game, adding ENS and Avvy name resolution, approval listeners, and dynamic fees.
- Earlier: MLH Fellowship, a frontend for a refugee-support nonprofit, and an HSK Chinese vocabulary extraction tool that’s still my most-starred repository.
SolidityHardhatFoundryNext.jsethers.jsTypeScriptArkiverPython
Skills
Levels, with the receipts
Five-point scale. Each line states what justifies the number, because a bar chart on its own means nothing.
Smart contracts & protocol
Most of my depth is here. Contracts that hold real money, on two very different VMs.
Move2.5y
Own the bridge and USDCx modules and the mint, burn, rate-limiting, timelock and refund logic underneath them, plus the fuzz and feature-flag testing around it.
Solidity4y
Bridge EVM side, the Nora BRS LayerZero V2 stablecoin as sole author, a live token upgrade to an OFT, and years of NFT and DeFi contracts before that.
Foundry & contract tooling
Primary test and deployment harness for the bridge contracts and the contract pipeline from MIP-27.
LayerZero
Upgraded MOVE to an OFT on a live token, authored the BRS OFT, fixed quote correctness in production, landed a rate-limiter change upstream, and full deployment, upgrade and wiring scripting for bridge contracts.
Protocol & bridge design
Authored MIP-58, MIP-18, MIP-27 and MD-14/17/21/30/81 - the atomic to lock-mint redesign was specified and argued before it was built.
Smart contract security
Set the security practices for bridging and multisig at Movement, carried USDCx through audit remediation, and found an underflow upstream in aptos-core. No deployment of mine has been exploited.
Frontend
Six production apps, several of them handling real funds.
TypeScript, React & Next.js5y
~120 merged PRs across the bridge interface, Movescan, Parthenon, faucet, multisig, and the analytics dashboard I built from its first commit.
Web3 frontend (wagmi, Aptos SDK, wallet adapters)
Live balance polling on block, approval-grant listeners, gas on destination, multi-wallet handling including per-wallet quirks, and the Movement wallet adapter.
Styling & design systems (Tailwind, Panda)
Drafted the Movement design system and drove its Panda migration; Tailwind across every app.
State & data fetching (Zustand, React Query)
Movescan state layer, indexer-backed dashboard charts, and halving query time on the bridge quote path.
Backend & infrastructure
Relayers, indexers, and the monitoring around them.
Rust2y
The CCTP xReserve relayer in production - watchdog, readiness probes, multi-chain support - plus work in Movement’s aptos-core fork.
Python
Discord faucet bot, hypercore-helper for Hyperliquid, and internal decoding tooling.
Terraform & AWS
Multi-region infra expansion and internal service deployment catalogues.
Docker & CI/CD
Containerised the Discord faucet, built the security CI for the BRS contracts, standardised tooling across the frontend fleet.
Observability & alerting
Rebuilt the relayer watchdog to catch silent connection death, added readiness probes, set up Hypernative monitoring, and tuned alerting back to signal.
Security operations & practice
The non-code half of keeping a network safe. This is the part I am formally responsible for.
Security operations & incident response
Main security operations maintainer at Movement: I prepare, verify and push privileged transactions to the multisigs governing production contracts, and I define how that is done safely. Authored the response protocols the on-call rotation follows - network, faucet and xReserve runbooks, plus monitoring and multisig operating procedures.
Testing (unit, fuzz, E2E)
Built property-based fuzzing into Move’s own test attribute - generated inputs, shrinking to minimal counterexamples, and a replayable regression corpus. Plus fuzz and feature-flag testing across bridge modules, and Movewright, the wallet browser-automation harness that made Movement E2E testing possible at all.
Agent engineering
Built a Move MCP server (scaffold_module, run_cli, search_framework, query_rpc, setup_cli) and a 556-line Move expert skill pinning agents to Move 2.1 semantics and Movement endpoints, plus agent-driven review and delivery across these repos.
Code review
182 pull requests reviewed across movementlabsxyz and moveindustries, and the reviewer of record for bridge and multisig changes.
Technical writing & specification
12 MIP and RFC documents, four runbooks, developer documentation, and the engineering standards.