Building open-source tools at the intersection of AI agents, crypto, and Web3.

Languages

Runtimes & frameworks

Chains & protocols

Infra & deploy

I've been hacking since I was a kid — started on the wrong side of it, eventually figured out white-hat was the move, and channeled it into bug bounties for Apple, AT&T, Microsoft, Google, and the U.S. Department of Defense.

Studied computer science and marketing (double major). Full-stack through college, then went deep on machine learning and data science. Caught the 2020 pandemic dip sub-$10K, went full-time crypto after that, helped grow Sperax, and launched GCR in 2024 — ran it to $13M.

These days I'm heads-down on the AI + crypto intersection: MCP servers, agent toolkits, x402 payment rails, and anything that puts AI agents in direct contact with on-chain primitives. I ship a lot — usually in 36-hour bursts.

What I'm into:

• AI agents that actually do things — autonomous, tool-using, on-chain
• MCP everywhere — 20+ chains, 1,100+ tools (modelcontextprotocol.name)
• Open APIs and free public data — free-crypto-news, crypto-vision
• Agent payments — stablecoins, x402, micropayments between machines
• Security done the right way — white-hat, disclosed, public credit
• Writing about it — Entrepreneur, HackerNoon, Medium

The Claude Code Leak (Mar 31 – Apr 16, 2026). When Anthropic accidentally shipped Claude Code's full TypeScript source via a source map in @anthropic-ai/claude-code@2.1.88, @Fried_rice spotted it and I stood up nirholas/claude-code as the public mirror (evolved from upstream ultraworkers/claw-code). Anthropic's DMCA named it as the parent repo, which briefly knocked 8,100+ forks offline. After two weeks of back-and-forth with GitHub Trust & Safety and a formal counter-notice, the repo was restored on April 16 and now lives on the clean-start branch — independent and community-owned, 6.4k+ stars. Full coverage + filings in the Press & PR section.

Provided security research and bug bounty submissions to:

Apple · AT&T · Microsoft · Google · U.S. Department of Defense

Public credit: Apple Security — HT212230 · HackerOne: hackerone.com/nich

"About a year ago, I hacked @ATT (aka found a #bugbounty) and they paid me $50 on @Hacker0x01. I decided to have the bounty paid out in #BTC directly to my Coinbase account. A year later, that $50 is now worth over $500." — @nichxbt on X, Apr 5, 2021

Claude Code leak coverage (Mar – Apr 2026) — nirholas/claude-code was the repo named in Anthropic's DMCA and the hub the story circulated around.

• Business Insider — A 4 a.m. scramble turned Anthropic's leak into a 'workflow revelation'
• The Hacker News — Claude Code Source Leaked via npm Packaging Error
• dev.to — Claude Code source code has been leaked
• Hacker News discussion #47609294 · #47611400

Official filings

• DMCA notice (2026-03-31)
• DMCA partial retraction (2026-04-01)

Viral X coverage

• @Fried_rice — discovered and publicized the leak (~35M views on the discovery post)
• @T3chFalcon — 1.6M-view thread tagging @nichxbt and linking the repo

Other press about me

• Vogue — PhotoVogue photographer profile
• Apple Security Credits — HT212230
• HackerOne — nich
• Crunchbase profile
• X / Twitter — @nichxbt
• BlockTelegraph — Alternative Approaches: Learn About Blockchain, DApps, Smart Contracts
• Inc.com — Grindez company profile
• Everipedia mirror (via Facebook)
• UAlready — legacy author page

Author pages

• Entrepreneur Magazine — contributor on Web3, metaverse, blockchain app economy
• HackerNoon — u/nich · about page — Contributor of the Year (Advertising & Entrepreneurship); topics: crypto, DeFi, NFTs, Twitter bots, decentralization
• Medium — @nrese · Medium — @nirholas · Medium — nicholasresendez — crypto analysis, Ethereum/XRP, personal blog
• Towards Data Science · crypto tag — crypto APIs, tweet scraping, language models, remote DS careers
• Amazon author page

Selected Entrepreneur articles

• This Is What Content Creators and Entrepreneurs Need to Know About Web3
• How the Metaverse Projects Reality in a Virtual Environment
• Blockchains Are the New App Stores

Selected bylines elsewhere

• TDS — Top 5 Cryptocurrency APIs for Developers
• Medium (The Crypto) — Go Undercover by Scraping Cryptocurrency Market Metrics with Python
• ValueWalk — Cryptocurrency Brings Social Benefits to Emerging Economies

Syndication & other bylines

• ValueWalk · Yahoo! News (HackerNoon syndication)

Pull requests to external projects, sorted by stars:

Repos I built that now live under Sperax: sperax-crypto-mcp ⭐16 · eliza-plugin-sperax ⭐8 · sperax-skills ⭐6 · Sperax/x402

93 public repos · ~7.9k stars, sorted by stars. Original work below; forks omitted.

lstm-bitcoin-prediction.ipynb ⭐25 · bnbchain-mcp ⭐24 · pump-swap-sdk ⭐24 · lyra-intel ⭐24 · github-to-mcp ⭐24 · mcp-notify ⭐24 · pa ⭐23 · extract-llms-docs ⭐23 · boosty ⭐23 · crypto-market-data ⭐23 · lyra-tool-discovery ⭐23 · solana-wallet-toolkit ⭐23 · plugin.delivery ⭐22 · w3ag ⭐22 · WisconsinCoin.sol ⭐22 · Binance-MCP ⭐22 · lyra-registry ⭐22 · crypto-data-aggregator ⭐21 · lyra-web3-playground ⭐21 · x402-deploy ⭐20 · Handshake ⭐20 · LooK ⭐19 · Binance-US-MCP ⭐19 · ethereum-wallet-toolkit ⭐19 · openbare ⭐19 · crypto-market-data-ts ⭐18 · cloud-computing ⭐17 · gitpretty ⭐17 · g1t ⭐16 · analyze-ethereum-address ⭐16 · auto-kill-terminal ⭐15 · market-capitalization-data ⭐14 · AuditKit ⭐12 · modelcontextprotocol.name ⭐12 · larp ⭐12 · pumpfun-claims-bot ⭐12 · scrape-smart-wallets ⭐12 · visualize-web3-realtime ⭐11 · nirholas ⭐10 · agent-voice-chat ⭐9 · pumpkit ⭐9 · task-queue-system ⭐9 · solana-launchpad-ui ⭐9 · CTRL ⭐9 · pump-fun-workers ⭐8 · vscode-google-cloud ⭐7 · x402-facilitator ⭐7 · bitrefill-agent ⭐7 · bitrefill-plugin ⭐7 · memescope-monday-directory ⭐7 · xspace-agent ⭐7 · kol-quest ⭐7 · automate-glama-submit ⭐6 · memescope-monday ⭐6 · erc8004-agent-creator ⭐2 · -w-.--- ⭐2

Best way to reach me is on X — @nichxbt. DMs open.