JaeHyuk Lim

Development of LLM-Based Automated Vehicle System Firmware (January 2024 – April 2025)

• Developed utilities for reversing and restoring vehicle system firmware, and built an automated analysis framework.
• Implemented analysis solution and core engine for firmware based on LLM and Python.
• Conducted research on deobfuscation, decryption feasibility, and potential decryption techniques for Python-based firmware.

Vehicle & ECU Security Research (January 2024 – April 2025)

• Researched privilege escalation vulnerabilities in internal ECU control firmware and web-based intrusion methods.
• Analyzed vulnerabilities in ECU firmware and internal communication protocols, including privilege escalation issues.
• Studied vulnerabilities and engine-level flaws in system-internal browser-based components.
• Diagnosed vulnerabilities in external communication service layers, researched external mobile app obfuscation and deobfuscation techniques, and performed reverse engineering on mobile apps.

Blockchain Threat Analyzer (March 2023 – August 2023)

• Analyzed hacking incidents and breaches on blockchain networks.
• Investigated causes of asset leakage and smart contract attack vulnerabilities in DeFi platforms such as Safemoon and Midas Capital, and conducted PoC research.

Smart Contract & Blockchain 0-Day Researcher (August 2022 – March 2023)

• Performed vulnerability analysis and diagnostics on DeFi and NFT-based smart contracts in blockchain networks.
• Researched and analyzed vulnerabilities in well-known blockchain services such as Marblex and DFX Finance.
• Studied latent vulnerabilities in DeFi and standard protocols such as ERC.

LLVM & iOS Security Framework Developer (March 2021 – July 2022)

• Worked as an AppSuit iOS Developer & LLVM Security Framework Engineer.
• Researched and developed iOS security solutions using LLVM (e.g., CFG flattening, resource obfuscation).
• Anti-debugging, rooting detection, and system integrity validation.

Kernel & Browser 0-day & 1-day Researcher (July 2019 – March 2021)

• Conducted vendor analysis and full chain exploit research for kernel, browser, and Bluetooth stack modules.
• Performed 0-day and 1-day exploit research on Android Bluetooth (e.g., Blueroid, BlueZ).
• Researched Android OS Binder IPC privilege escalation vulnerabilities and exploitation techniques.
• Browser engine 0-day and 1-day vulnerabilities and advanced exploitation techniques.

Mobile & Web Pentesting Researcher (July 2017 – July 2019)

• Conducted penetration testing for mobile and web services in the financial sector (e.g., Samsung Card, Woori Card).
• Researched mobile and web service vulnerabilities, including login and authentication bypass.
• Discovered multiple critical vulnerabilities, and analyzed anti-tampering techniques such as Arxan protection on mobile.

Smart Home & IoT Vulnerability Analyst (July 2016 – July 2017)

• Specialized in vulnerability analysis of Smart Home and IoT-based systems.
• Analyzed vulnerabilities in LG Smart Home appliances (e.g., refrigerators, air conditioners) and HackRF-based low-level wireless communications.
  Discovered multiple vulnerabilities including session hijacking, XSS, and remote firmware attacks.
• Analyzed vulnerabilities in Kakao Mini's voice recognition speaker.
  Researched firmware privilege escalation and obfuscation bypass techniques.