High severity2021
sso2.agora.io
A critical broken access control vulnerability. Changing a few cookie parameters gave full account takeover without valid credentials.
Read the writeupLet's Work Together
Full Stack Engineer. Contributing to Gaia.
Open to full-time roles
If you'd prefer to send your message via email, send them to sankalpaacharya01@gmail.com for a same day response.
What I'm Recently up to
Hey I'm Sanku, looking for a full-time role —💼
In the meantime, I'm contributing to Gaia by
The Experience Company an open source AI assistant that connects your email, calendar, and tools in one place.
Recently fixed a LangGraph query drift bug and a Redis cache issue in the agentic flow. View PR #646 →
View all PR's
I explore React internals and write about them at inside-react. Recent posts:
I'm active on Twitter mostly posting about
React.
Notable Projects
Work Experience
Software Engineer
Product Studio
Jul 2026 - Present
Full Stack Engineer - Maintainer
Gaia
Oct 2025 - Present
Full Stack Engineer
Nox (OpenAI-backed)
Mar 2024 - Aug 2024
Full Stack AI Developer
Unstuck
Feb 2024 - Mar 2024
Security Findings
Hover or tap the blacked-out parts to read them.
Medium severity2023
leetcode.com
A logic flaw in the authentication flow exposed a redirection bypass that led to account takeover under specific conditions.
See the discussion
