Available for Lead Roles

Devarsh Panchal

Lead Mobile Engineer · Android, Flutter, React Native

I ship mobile code into apps I don't own and threat models I don't control

Ad-Tech
12,311 lines of Kotlin behind four mediation hosts, published to Maven Central, pub.dev and npm
FinTech
Zero vulnerabilities on the Android and iOS security re-audit
Open Source
Four packages, including a GPU chart engine that talks to Dart over FFI
About Me

I work on mobile code that other people depend on and cannot easily inspect

For the last stretch that has meant an ad mediation SDK. It ships as a binary inside a publisher's app, so every decision is somebody else's risk. A leaked Activity reference is their memory. A duplicate impression callback is their revenue report, and their trust in us.

I spend more time on teardown paths and callback ordering than on features, because those are the things that get noticed. The other half of my work is a UK trading app that had to survive a penetration test before it could survive its users.

An SDK has two users who never meet: the developer doing the integration, and the revenue team asking why fill dropped. I wrote the integration docs that let publisher developers onboard without a call, and I was the one on the thread when integrations broke.

What I'm Looking For
Lead RolesProduct-drivenRemote/HybridFull ownership

What I Bring

Native Deep-Dive

Kotlin and Swift under Flutter and React Native, not around them

SDK Engineering

Code that runs inside apps I will never see the crash reports for

Mobile Security

Pinning, Keystore, root and jailbreak detection, VAPT remediation

Publisher Facing

Integration docs, onboarding, and the awkward thread when it breaks

Production Domains

Shipped across four industries.

Apps and SDKs running in live markets, from UK wealth management to real-time ad mediation.

FinTech

UK wealth management

Logistics

Supply chain

VOIP/VPN

Communication

Ad-Tech (SDKs)

Real-time bidding & analytics

Flagship Work

Engineering Case Studies

Flagship projects delivered end-to-end, from architecture to production. Filter by stack, or open any study for the engineering detail.

5 projects
Case Study 01Featured

One Kotlin core, four mediation hosts, 99.9% crash-free

A mediation SDK is a binary you hand to someone who will never read it, to run inside an app whose crash reports you cannot see. Publishers do not file bugs, they remove the dependency. One Kotlin core of 12,311 lines sits behind four host adapters and Flutter and React Native wrappers, so four mediation platforms and three publisher-facing surfaces share one behavioural contract.

🚀 Impact

Crash-free sessions across all platforms
Higher eCPM for publishers
Increase in developer adoption
  • A single Kotlin core owning the waterfall, timeout budget, callback contract, error taxonomy and telemetry, with four thin host adapters translating for AdMob, Google Ad Manager, AppLovin MAX and IronSource
  • Flutter and React Native wrappers that normalise delivery at the core boundary, so a load callback reaches the publisher on the same thread regardless of which surface they integrated through
  • A client-side OpenRTB bid response path: seat flattening, highest-price selection, media-type gating and creative expiry, with six distinct no-fill reasons instead of a silent failure
  • Creative rendering in a locked-down WebView, with clicks handed to the OS so the ad view never navigates away from the creative
  • A 20-code error taxonomy where each code carries a severity and an explicit decision about whether a publisher should ever see it
Case Study 02

Addify – Dynamic Ad Platform

A one-stop solution for online and offline marketing with effective pricing. It handles dynamic ad mediation (Google Ads, Meta Ads, Amazon Ads) from a single platform. You can choose exactly where your ads are shown, providing total cost tracking for offline and digital campaigns with respect to selected areas and platforms.

🚀 Impact

Increase in downloads
Increase in premium users
More revenues from the offline ad market
More revenues from the online ad market
  • Cost-effective digital & offline marketing targeting specific geographic areas and platforms
  • Total cost calculation per hour or day
  • Flexible campaign management — cancel ads or add extra platforms/areas at any time
  • Online ad referral and connection with local vendors
  • Dynamic ad mediation switching based on the selected location area
Case Study 03Featured

eWealth: a FinTech trading app taken to a zero-finding security re-audit

A UK bond and fund investment platform holding session tokens, portfolio positions and a two-factor approval flow that can authorise activity straight from a notification action. Indusface ran a manual penetration test alongside automated scanning against OWASP Top 10, SANS Top 25 and OSSTMM. I remediated the findings across Android, iOS and shared Flutter, and the September 2026 re-audit came back with zero vulnerabilities on both platforms.

🚀 Impact

Increase in daily active trading users
Crash-free rate across complex socket events
Improvement in chart rendering speeds
  • Zero vulnerabilities in the Android and iOS re-audit
  • Keystore-backed encrypted storage for the API token, FCM token and two-factor payload, plus backup and data-extraction rules so the OS stops including that data in backups at all
  • Certificate pinning on the production domain, pinned on the SHA-256 of the certificate public key info so the pin survives certificate rotation as long as the key does not
  • Native root, jailbreak, debugger and Frida detection on both platforms, enforced at launch and again inside each platform notification action handler
  • RFQ and RFS execution flows with a Best Execution mode, resolving a numeric vendor ID arriving over the socket to the venue the user is actually dealing with
  • Obfuscated release builds on both platforms and log suppression that had been putting request detail into the device console
Case Study 04

DMS – Delivery Master

A B2B delivery management software designed to streamline logistics for any organization. It uses a single codebase to support dynamic company logins and dynamic role-based logins. Total 4 developers and 2 QA were required for the project.

🚀 Impact

Increase in downloads
Increase in B2B market at the state level
Increase in B2B market at the national level
More referrals from reviews
  • Offline capability — local database syncs automatically with the API when the user gets internet
  • Driver location tracking updating every 15 seconds
  • Clock-in/Clock-out functionality with Break-in/Break-out support
  • Add Expense section with attachments so drivers can add bills for food or vehicle repairs
  • Delivery status updates in real-time
  • Proof of delivery capture — photos and customer signatures
  • Multiple Job Locations on the same device for multi-job drivers
Case Study 05

SecondLine: a call screen that answers before the Flutter engine starts

An incoming call has about a second before it feels broken, and Flutter does not start that fast. On both platforms the engine had to boot before any Dart could draw, so a call arriving on a cold app showed a splash screen first. Users were watching a loading screen while their phone rang. SecondLine is VOIP to PSTN calling with virtual numbers, e-SIM, messaging and video.

🚀 Impact

Reduction in call drop rates
Concurrent active calls supported
  • Native-level call answer speeds, under 1 second
  • Native incoming call screens on both platforms, rendered from the push payload without touching the Flutter engine
  • Manual integration of the Android and iOS Twilio SDKs, bridged through Method and Event Channels
  • A natively built notification layer carrying user-defined dynamic actions
  • Virtual numbers, e-SIM provisioning, messaging, QuickBlox video, and in-app purchases for premium numbers
Native Deep-Dive

Low-level engineering, from C++ to the app store.

Case Study 06

VPN Super – Low-level Native Engineering

A cross-platform VPN application built with Flutter, integrating a VPN wholesaler SDK and robust OpenVPN3 protocols for secure internet access.

🚀 Impact

Improved connection handshake speeds through optimized C++ binaries
Sustained a rating over 500k active users
  • Prevented the app from being delisted from the Google Play Store by meeting compliance deadlines
  • One-tap VPN connection infrastructure
  • Deep native OpenVPN3 integration
  • High-speed server switching and cross-platform mobile support for both Android and iOS

Open Source

Four things I needed, so I built them.

Each one started as a problem in production work. Two ship on pub.dev, one replaces an app Google walked away from.

flutter_native_chartsGPU chart engine for Flutter
pub.devv0.0.2

A candle chart in Flutter falls apart at scale. Every repaint walks the layer tree, so tens of thousands of candles with continuous pan and zoom drops frames. I hit this wall building a trading app, fixed it there with CustomPainter, then built the version that does not need the workaround.

  • One C++ engine drives both platforms. Metal and MetalKit on iOS with shaders compiled to a .metallib at build time, GLES3 and GLSL ES 3.0 on Android through JNI, both submitting batched vertex buffers instead of per-primitive Canvas calls
  • Exactly one MethodChannel call exists in the whole package: getEngineHandle, once per view, so Dart can attach the FFI engine. After that no chart data touches a platform channel, and there is no EventChannel at all
  • Bulk history goes over dart:ffi as a Float64List of six contiguous doubles per candle, so a hundred thousand bars land in native memory without paying per-bar codec cost
  • Live ticks stream through updateLivePrice into rolling one-minute buckets, with a price tracer drawn as a GPU line primitive and a Y-axis badge projected into screen space so it stays aligned through pan and zoom
  • The native axis, legend and tooltip overlay polls engine revisions rather than having overlay state pushed over a channel on every label change
  • Candle, line and area series, and no Material import required. The Dart side depends on ffi and the Flutter SDK, nothing else
  • The README states the honest limit: the CPU still runs viewport math, input, overlay text and vertex building. Nothing here is zero CPU, the win is not paying Dart Canvas repaints per frame
Android · iOSDart FFIC++MetalGLES3KotlinSwift
android_file_transfer_macosAndroid transfers on macOS
GitHub · GPLv3

Google abandoned Android File Transfer years ago, and the alternatives want a cloud account for a cable you already plugged in. Moving a file off your own phone should not require an upload.

  • Two transports behind one contract. USB over MTP is native Swift against libmtp, Wi-Fi over FTP is pure Dart, and both implement the same six commands: listDirectory, pushFile, pullFile, deleteRemote, makeRemoteDir, remoteFreeSpace
  • Both emit identical transferProgress, transferDone and devicesChanged events into a single merged stream, so the file browser and the transfer queue never know or care which transport is live
  • The phone-side FTP server is a hand-written FTP engine in Kotlin, shipped as a companion app rather than depending on whatever the user already installed
  • FTP is a deliberate choice, not a shortcut. It is the most widely supported phone-side protocol and its raw binary data channel is the fastest thing available for bulk transfer
  • Neither path needs ADB or Developer Options. Plug in and set the phone to file transfer, or stay on the cable-free path over your own LAN
  • Finder drag and drop both directions, recursive folder upload, and a queue with live speed, cancel, and queued or parallel modes
  • Entirely local. No account, no cloud, no telemetry
macOS 12+Flutter macOSSwiftlibmtpCubit
socket_io_native_clientNative Socket.IO for Flutter
pub.devv1.1.0

The Dart Socket.IO clients I tried could not listen to messages emitted into a room, and they parsed frames on the main isolate, so a busy socket showed up as jank.

  • Wraps the official Socket.IO client libraries on Android and iOS rather than reimplementing the protocol in Dart, so it tracks whatever the server is running instead of lagging a spec version behind
  • Listens to room-emitted messages directly, which is the specific thing the Dart wrappers could not do and the reason this exists
  • Native code runs on background threads, so frame decoding never lands on the Flutter main thread and a busy socket stops showing up as dropped frames
  • A SocketIoNative singleton holds one connection for the whole app, with connect, on, off, emit, disconnect and dispose, plus onConnected, onDisconnected and onError
  • Per-platform escape hatches through ExtraAndroidSocketOptions and ExtraIOSSocketOptions, because the two native clients do not expose an identical option set and pretending otherwise would leak
  • A ConnectionStatus enum covering connecting, connected, disconnected and error, so reconnection UI has something real to bind to
Android 21+ · iOS 15+ · Java 11+KotlinSwiftPlatform Channels
encryption_decryptionsAPI payload encryption
pub.devv3.0.0

Encrypting request and response bodies is a requirement in finance work, and doing it consistently across Android, iOS and web usually means three different implementations that disagree at the edges.

  • One Dart surface over RNCryptor running natively on Android and iOS, and crypto-js on web, so the three platforms agree on the wire instead of drifting apart at the edges
  • Handles strings, maps, lists, integers and doubles, so a whole request body encrypts without hand-rolling serialisation at each call site
  • The same input produces different ciphertext every time, so an observer cannot recognise a repeated payload by its shape
  • Native execution rather than a Dart implementation, which is what keeps large bodies off the critical path
  • The README names the sharp edge instead of hiding it: maps and lists must not contain nulls
Android · iOS · WebKotlinSwiftRNCryptorcrypto-js
AI-POWERED ONE-MAN AGENCY

Vibe Coding

Ship full-stack ecosystems at speeds traditional teams can't match. I leverage Cursor, Claude AI, and Vibe Coding to architect and ship complex systems rapidly.

Powered By:
Cursor IDEClaude AIGitHub CopilotCodeX

AI handles syntax & boilerplate. I architect and ship business logic at scale.

How It Works:

  • Rapid Iteration: AI handles boilerplate. I own architecture and logic.
  • Production-Grade Quality: Ship scalable, maintainable systems without compromise.
  • Compressed Timelines: 60-90 day projects ship with weeks of iteration.

Proof of Work:

  1. 1.60-Day Booking System (React Native, RBAC, Backend)

    Shipped complete booking management with role-based access control and sophisticated backend logic on aggressive deadline.

  2. 2.300 RPS Backend (Node.js, Redis, RabbitMQ)

    High-performance inventory management backend sustaining 300+ requests/second with active optimization and dedicated support.

What I Deliver:

  • Full-stack Flutter & React Native apps
  • Scalable Node.js backends (REST, GraphQL, Socket.IO)
  • System architecture & technical strategy
  • Production deployment & DevOps setup

Skills · Grouped by domain

Ordered by depth of use, not by breadth.

Nothing here I could not hold a thirty minute conversation about.

📱 Mobile & Native

KotlinKotlin
DartDart
FlutterFlutter
AndroidAndroid
  • React Native
  • Swift
  • Platform Channels
  • Event Channels
  • Native View Integration
  • Custom Plugin Creation
  • Coroutines
  • GetX
  • Bloc
  • MVVM

📊 Ad-Tech & SDK

  • Ad Mediation
  • AdMob
  • Google Ad Manager
  • AppLovin
  • IronSource
  • OpenRTB Response Handling
  • WebView Creative Rendering
  • Viewability Measurement
  • Adapter Contracts
  • Maven Central
  • pub.dev
  • npm

🔐 Mobile Security

  • Certificate Pinning
  • Android Keystore
  • iOS Keychain
  • EncryptedSharedPreferences
  • Root & Jailbreak Detection
  • Anti-Debug
  • Frida Detection
  • ProGuard
  • R8
  • VAPT Remediation

⚡ Real-Time & Platform

FirebaseFirebase
  • Socket.IO
  • WebSockets
  • Twilio
  • QuickBlox
  • FCM
  • CustomPainter
  • Dart Isolates
  • JNI
  • C++
  • CMake
  • GitLab CI

Career Journey

Experience

Four years of native and cross-platform work, from SDKs to trading apps to VOIP.

  1. Lead Flutter Developer Tuvoc Technologies

    Apr 2025 - Present

    Lead developer for eWealth, a FinTech investment app. Focused on Socket.IO integration, complex UX, native code, native view integration, and deep performance optimization.

    FlutterSocket.IONative IntegrationPerformance Optimization
  2. Flutter & iOS Developer Upsquare Technologies

    Mar 2023 - Mar 2025

    Migrated legacy VOIP, VPN, and SaaS products to Flutter, boosting DAU by 30% and revenue by 28-40%. Achieved 98% crash-free sessions. Delivered a 120+ screen cross-platform chat app in 60 days and led 2 client projects from scratch.

    FlutteriOSWebSocketsVOIP/VPNDart
  3. Jr. Flutter Developer AD Square Technologies

    Jun 2022 - Mar 2023

    Built a delivery management system (DMS), a TikTok-style social media app, and interactive quiz apps. Collaborated directly with clients to deliver scalable, production-grade features.

    FlutterFirebaseREST APIsDart
  4. Trainee Flutter Developer Infolabz IT Services

    Jan 2022 - May 2022

    Developed client-facing applications utilizing Flutter and Firebase. Focused on debugging, feature development, and UI optimization.

    FlutterFirebaseUI/UX Debugging
Let's build something

Ready to ship code into apps you cannot afford to break.

dev.devarsh43@gmail.com
© 2026 Devarsh Panchal. All rights reserved.