KAUÃ VICTOR / M2HCZBRAZIL · UTC−3
Software engineer & security researcher

Engineeringgames atlive scale.

Roblox. Backend systems. Offensive security.
From the first line of code to live production.

Explore my work
01 / THE PERSON BEHIND THE CODE

Kauã
Victor.

M2HCZ / M2HCS

A software engineer who builds games — and understands how they break.

I'm a Senior Full-Stack Software Engineer, Roblox developer and Offensive Security Researcher based in Brazil.

I started building on Roblox in 2014. My work spans production backends, gameplay, networking, persistence and LiveOps, with server authority, performance and maintainability at the core.

Alongside engineering, I bring nine years in offensive security and AppSec: two assigned CVEs, three reported NASA vulnerabilities, and acknowledgements from GitHub, Google, Spotify, xAI and Tesla.

12+
Years programming
2014
Building on Roblox since
09
Years in security
02
Assigned CVEs
02 / STUDIOS & COMMUNITIES

The teams.
The experience.

Technical leadership, backend engineering and live production across twelve studios and communities.

04 / ENGINEERING

Behind
the gameplay.

Architecture that holds up through the next release, the next traffic spike and the next exploit attempt.

LuauTypeScriptPythonRustC / C++
01

Backend architecture

Modular, server-authoritative systems built for live player scale.

02

Networking & performance

Latency, replication, memory discipline, and stable production performance.

03

Persistence & economies

Player data, inventories, progression, monetization, and safe migrations.

04

LiveOps & production

Release systems, events, observability, incident response, and rapid iteration.

05

Security & anti-exploit

Authorization, abuse resistance, secure reviews, validation, and hardening.

06

Technical leadership

Architecture standards, reviews, hiring, planning, and engineering execution.

05 / VULNERABILITY RESEARCH

Offensive mindset.
Stronger systems.

Security research informs the way I build: better authorization, abuse resistance and production hardening.

RESPONSIBLE DISCLOSURE / ACKNOWLEDGEMENTS
GitHubGoogleNASATeslaxAI / XDiscordAutomatticRoblox

Names identify relevant programs or affected ecosystems, not employment, endorsement, partnership or a commercial relationship.

06 / HAVE SOMETHING IN MIND?

Let's build
the next one.

m2hcz@codingfast.online