Isn't that overstating his accomplishments a bit? Unless by "just about everything", you mean the DNS bug and the media, sure...

None of his published work seems consistent with the skillset that would qualify one to thoroughly audit bitcoin. He tends to stick to higher-level, less technical vulnerabilities.