Fullstack Developer & Lovable Expert Needed for a Quick Supabase PostgreSQL Audit

I run a live streaming battle platform (fairrace.app) built on Next.js and TypeScript, hosted on Vercel, with Supabase PostgreSQL for the database, LiveKit for video, and Stripe for payments. It's live in production with real users and a real money in-app coin economy. I need a fullstack developer, ideally one who is also a Lovable expert and comfortable auditing apps built quickly on tools like Lovable, Replit, Base44 or Bolt, to run a quick but thorough Supabase PostgreSQL audit of the codebase and database before any issues cost me money or user trust. Tech Stack Next.js (App Router) with TypeScript, Supabase (Postgres, Auth, Realtime, RLS, Postgres functions), LiveKit, Stripe, and GitHub for version control. Core Loop Users buy coins, then gift them to streamers during live video. Streamers earn a cut and can withdraw via PayPal or convert to a spendable balance. The platform also runs a live 1v1 battle and tapping system, co-hosting, and a leaderboard. What I Need Checked Coin economy integrity: Every code path that moves coins: gifts, Stripe purchases, withdrawals, conversions, refunds. I've already found and fixed several spots where a failed database write was silently ignored while coins had already moved. I need someone to find any others and confirm the whole system is airtight. Database security: RLS policies on every table in Supabase PostgreSQL, and confirmation that all coin-mutating Postgres functions are locked to service_role only, never callable from a user's browser. Race conditions: Simultaneous taps and gifts in live battles, and the same account active on multiple devices at once. Realtime and LiveKit: Subscription scoping and cleanup, plus the co-host and battle dual-room connection setup. General pass: Flag anything else fragile or likely to cause silent data corruption. Deliverables 1 A written report of issues found, ranked by severity, in plain language I can act on as a non-technical founder. 2 Actual fixes for anything critical or high severity, submitted for my review. No direct pushes to production.3 A quotation for fixing the issues found, broken down by severity, along with a time estimate for how long the fixes will take to complete. Ideal Candidate A fullstack developer with strong Next.js and Supabase or Postgres experience (RLS, Postgres functions, Realtime specifically), ideally with a fintech or payments background. Lovable expert-level familiarity is a plus since it helps you quickly spot patterns where speed was prioritized over safety, even though this app was hand-coded rather than built on Lovable. Please include a past audit example in your proposal.