Loading Still loading Error Offline
Loading

Setting things up...

Please wait a moment while the content loads.

shafealikhan.dev 0%
Back to Projects

RigWorkZ - Fractional Mining
Investment Platform

Verified hardware. On-chain ownership. Trust built into every layer.

Role: Blockchain & Full-Stack Engineer
Timeline: 2025-2026
Scope: 4 Systems · Solo + 1 Small Team
Status: MVP - Paused
Verified on Etherscan SolidProof Audit Live Website Onboarding UI Preview ↗ (staging)
Solidity Node.js TypeScript React Python PostgreSQL MySQL Redis GCP Web3.js OpenZeppelin
Overview

What is RigWorkZ?

Mining investment has traditionally been opaque, hard to verify, and prone to fraud - investors send capital and trust that hardware exists and performs. RigWorkZ addresses this directly: physical mining machines are verified in real time via cryptographically signed telemetry, and on-chain fractional ownership (backed by NFTs) ties verified performance directly to reward payouts. The result is a trust layer that makes the hardware legible to the blockchain, and the investment legible to the investor.

I worked across four distinct systems that together form the platform's backbone - the token, the public website's wallet layer, a telemetry validation engine, and a full machine onboarding platform. Built solo, with an intern assisting on implementation and a technical advisor providing direction and final sign-off.

My Contributions

Four Systems, One Platform

$ROGZ Token Contract
ERC-20 · Ethereum Mainnet · Independently Audited

Designed and deployed the platform's native token, which functions as the ecosystem's utility, bonding, and reward-settlement asset. The contract prioritises holder protection - a hard-coded 5% tax cap that governance can never override, a role-gated admin layer with timelock controls instead of a single owner key, and reentrancy-safe swap locking throughout.

Built on OpenZeppelin's ERC-20/ERC20Permit/AccessControl base with a role-gated, timelock-controlled admin layer - no single owner key.
Implemented buy/sell tax logic with a hard-coded 5% cap that governance parameters can never exceed, protecting holders from a malicious or compromised admin.
Built an automatic swap-and-distribute mechanism: accumulated tax tokens are periodically swapped for ETH via Uniswap and split across investment, marketing, development, and treasury wallets using configurable allocations.
Anti-abuse guardrails: max transaction and wallet limits with sane minimum floors, exclusion lists for contract-internal and partner addresses.
Contract was independently audited, verified on Etherscan, and completed a public presale through a third-party launchpad.
Solidity OpenZeppelin Hardhat Ethers.js Uniswap V2
Audit Report View on Etherscan
Wallet Integration & Whitelisting
Main Website · Node.js / Express / MongoDB

Built the wallet connection and whitelist infrastructure for the public-facing RigWorkZ website - turning "connect your wallet" into a controlled, auditable onboarding funnel rather than an open door. Supported early access and gated onboarding for a global user base.

Implemented WalletConnect-based multi-wallet support so users worldwide could connect regardless of their preferred wallet provider.
Built a Node.js/Express/MongoDB backend for wallet registration and whitelist management: address validation and normalization, duplicate-registration protection, paginated lookups, and registration statistics.
Locked down CORS to approved RigWorkZ domains only; structured error handling, health checks, and graceful shutdown for production reliability.
Made ongoing updates to the live site as product requirements evolved.
Node.js Express MongoDB WalletConnect Web3.js
Live Website
Machine Telemetry Validation Engine
Async Oracle · Python / Flask / PostgreSQL / Redis

An async oracle-style service that acts as the trust layer between physical mining hardware and the platform's on-chain reward logic - answering the core question: "Is this machine actually doing what it claims to be doing?" Every step is cryptographically secured to prevent spoofing.

Wrote pool adapters for F2Pool, AntPool, and Foundry that normalize telemetry from very different pool APIs into a single common data shape.
Cross-checked live pool telemetry against backend-stored machine records to classify each machine's status (online/offline/unknown) and worker-name compliance (verified/mismatched/unclaimed/pending) - catching spoofed or misreported data.
Secured the data pipeline: JWT-based monitor auth, Ed25519-signed telemetry batches, signature verification on ingest, timestamp-window checks, and replay protection via unique batch IDs.
Production resilience: dead-letter queue for failed batches, cycle-history logging for auditability, rate limiter, and a full Prometheus/Grafana observability stack.
For dev/testing: built a virtual mining pool simulator with hashrate variance, on/offline worker behavior, and injected API failures (429/503) - plus a mock backend for auth and machine data.
Python Flask PostgreSQL Redis Ed25519 Prometheus Grafana
Private repo - client's org
Machine Onboarding System (MVP)
React 19 · Node.js · GCP · Installer Agent Scripting

Designed and built from scratch - with no existing blueprint - the system that connects a physical mining machine's operating environment to the RigWorkZ cloud platform. Covers frontend, backend, agent scripting, and cloud infrastructure. This was the most architecturally demanding piece: the security model (key exchange, signing, token-gated installation) had to be researched and designed from the ground up.

Frontend
A guided, multi-step onboarding flow built in React 19 + Vite + TypeScript + Tailwind - wallet connection, operator setup, mining pool binding, verification, and script installation.
Route guards and context-based state so protected views (rig details, machine details, event feeds) only unlock after successful verification.
Full i18next internationalisation support baked in from the start.
Backend
Nonce-based wallet signature authentication and JWT session handling - no passwords.
One-time install tokens to gate installer/agent access; RSA encryption for sensitive data (including operator wallet address) passed to the agent.
Full machine lifecycle: registration, fingerprinting, telemetry storage, status tracking, operator profile management - with idempotent upsert operations and Swagger-documented endpoints.
Installer & Agent Scripts
Single-command curl installer: auto-discovers the mining machine on the local network, checks Node.js/terminal versions, generates an RSA keypair, registers the machine, and bootstraps the agent.
Agent normalizes raw miner telemetry (hashrate, uptime, power, fan speed, temperature, hardware errors), decrypts the operator wallet address using exchanged keys, and continuously reports heartbeat/telemetry data back to the backend.
Every step - install, registration, telemetry - is cryptographically signed; all sensitive data encrypted in transit.
React 19 Node.js TypeScript MySQL GCP RSA i18next Swagger
UI Preview Private repo - client's org
Context

Ownership & Status

Contribution Breakdown

Segments 1–3 (token contract, wallet/whitelisting, validation engine) were built solo.

Segment 4 (machine onboarding system) was built alongside one consultant and one other developer.

Source code for all four segments lives in the client's private GitHub organization and isn't publicly linkable. Verifiable public artifacts: the audited token contract on Etherscan and the live production website.

MVP - Paused
Project Status

The platform reached MVP with most core systems in place. Remaining work included migrating the token contract to an L2 and onboarding additional mining machines into the ecosystem.

Development is currently paused due to funding and market conditions, with client availability also a factor. The token contract, audit, and main website remain live and publicly accessible.

Additional Work

Beyond the Four Systems

Researched Layer 2 deployment options - including Arbitrum - for the next phase of smart contract development and for a related grant application. This included evaluating gas cost tradeoffs, bridge security models, and the token migration path for existing $ROGZ holders.

All Projects
↑