Joseph
Olutimehin

Event-driven platform on Google Cloud

A Terraform-managed GCP platform that indexes confirmed USDC and USDT transfers on Ethereum mainnet into immutable NDJSON objects in private Cloud Storage, and serves them from its own store rather than a third-party API. Generation-guarded checkpoints make crash recovery idempotent: a restart re-reads its own position instead of double-writing.

• Node.js indexer, Express API and Nodemailer alerter containerised with Docker. Continuous processing runs on a Cloud Run Worker Pool, with least-privilege Cloud Run services behind Pub/Sub OIDC push, Secret Manager, lifecycle retention, retries and dead-letter handling.
• Statically exported Next.js and React dashboard served from a private GCS origin through a global HTTPS load balancer, Cloud CDN and Cloud Armor; /api/* routed to Cloud Run through a serverless NEG.
• Approval-gated Cloud Build CI/CD with tests, typechecking, Terraform validation, immutable Artifact Registry digests, release-tag deployment and smoke tests.
• Cloud Monitoring and Logging alerts on uptime, p99 latency, degraded health, Pub/Sub backlog, dead-letter depth and indexer liveness.

Currently in build. This space is reserved for it.

Coinbase

• Led smart contract security reviews for the Base-Solana Bridge, the x402 payment protocol, the Base Azul network upgrade and numerous other Coinbase core projects, assessing smart contract vulnerabilities, trust boundaries, cross-chain security failures, upgradeability issues, and integration and rollout risk.
• Conducted 20+ ecosystem security reviews for protocols integrating with Base, defining remediation requirements and release gates before integration or launch.
• Built and maintained internal AI-powered smart contract auditing tooling used across the security organisation to support repeatable review workflows.
• Served on call for security incident response, triaging live security incidents and coordinating resolution across engineering and security teams.

Independent · Code4rena, Cantina, Sherlock, Immunefi, Codehawks, QuillAudits

• Completed 30+ smart contract security reviews, identifying 50 High- and Medium-severity vulnerabilities validated and accepted by protocol teams.
• Reviewed a broad mix of DeFi and interoperability protocols including AMMs, lending markets, stablecoins, vaults, bridges and omnichain infrastructure, applying threat modelling and secure-SDLC analysis.

INTMAX

• Contributed to zero-knowledge developer documentation for a ZK rollup, covering protocol concepts, integration guides and onboarding material for external teams building on the network.
• Drove protocol education and developer onboarding through technical presentations at Google DevFest Lagos and Africa Tech Summit in Nairobi.

Astra Metaverse

• Designed and deployed ERC-1155 token contracts for a marketplace platform.
• Built supporting Node.js and TypeScript APIs, integrating backend services with deployed contracts through Ethers.js and Wagmi.

Collect Waves

• Built NFT and marketplace contracts with ERC-20 token integration, and the API services supporting them.
• Delivered the full application stack around the contracts: a frontend connected to on-chain state, and Node.js and TypeScript REST APIs for off-chain data.