Joseph
Olutimehin

Event-driven platform on Google Cloud

A Terraform-managed GCP platform that indexes confirmed USDC and USDT transfers on Ethereum mainnet into immutable NDJSON objects in private Cloud Storage, and serves them from its own store rather than a third-party API. Generation-guarded checkpoints make crash recovery idempotent: a restart re-reads its own position instead of double-writing.

• Node.js indexer, Express API and Nodemailer alerter containerised with Docker. Continuous processing runs on a Cloud Run Worker Pool, with least-privilege Cloud Run services behind Pub/Sub OIDC push, Secret Manager, lifecycle retention, retries and dead-letter handling.
• Statically exported Next.js and React dashboard served from a private GCS origin through a global HTTPS load balancer, Cloud CDN and Cloud Armor; /api/* routed to Cloud Run through a serverless NEG.
• Approval-gated Cloud Build CI/CD with tests, typechecking, Terraform validation, immutable Artifact Registry digests, release-tag deployment and smoke tests.
• Cloud Monitoring and Logging alerts on uptime, p99 latency, degraded health, Pub/Sub backlog, dead-letter depth and indexer liveness.

Multi-project network architecture on Google Cloud

Banking-style four-project GCP build. Shared VPC with subnet-level IAM delegation, identity-based firewall rules, an internal passthrough load balancer published to a partner VPC over Private Service Connect, and VPC Flow Logs aggregated into BigQuery. All provisioned with Terraform.

Stablecoin Whale Monitor · Self-employed

• Designed, built, and operate a live Google Cloud platform that monitors large USDC and USDT transfers on Ethereum, evolving it from Compute Engine VMs to Cloud Run/GKE and a Terraform-managed serverless architecture.
• Built modular infrastructure using Cloud Run, Cloud Run Worker Pools, Cloud Storage, a global external Application Load Balancer, Cloud CDN, Cloud Armor, IAM, Secret Manager, and Cloud Monitoring.
• Implemented approval-gated CI/CD with Cloud Build, immutable container releases, automated testing, and deployment smoke tests.
• Applied least-privilege IAM, private storage, secured ingress, and workload-specific service accounts.
• Improved reliability through crash-safe checkpointing, idempotent processing, observability, and production incident troubleshooting.

Coinbase

• Led smart contract security reviews for the Base-Solana Bridge, the x402 payment protocol, the Base Azul network upgrade and numerous other Coinbase core projects, assessing smart contract vulnerabilities, trust boundaries, cross-chain security failures, upgradeability issues, and integration and rollout risk.
• Conducted multiple ecosystem security reviews for protocols integrating with Base, defining remediation requirements and release gates before integration or launch.
• Built and maintained internal AI-powered smart contract auditing tooling used across the security organisation to support repeatable review workflows.
• Served on call for security incident response, triaging live security incidents and coordinating resolution across engineering and security teams.

Independent · Code4rena, Cantina, Sherlock, Immunefi, Codehawks, QuillAudits

• Completed 30+ smart contract security reviews, identifying 50 High- and Medium-severity vulnerabilities validated and accepted by protocol teams.
• Reviewed a broad mix of DeFi and interoperability protocols including AMMs, lending markets, stablecoins, vaults, bridges and omnichain infrastructure, applying threat modelling and secure-SDLC analysis.

INTMAX

• Contributed to zero-knowledge developer documentation for a ZK rollup, covering protocol concepts, integration guides and onboarding material for external teams building on the network.
• Drove protocol education and developer onboarding through technical presentations at Google DevFest Lagos and Africa Tech Summit in Nairobi.

Astraverse

• Built a Gaming and Fashion protocol on Ethereum, writing and testing all smart contracts.
• Designed and deployed ERC-1155 token contracts for the marketplace platform.
• Built Node.js and TypeScript APIs, integrating backend services with deployed contracts via Ethers.js and Wagmi, and handled integration with the frontend team.

Collect Waves

• Built NFT and marketplace contracts with ERC-20 token integration, and the API services supporting them.
• Delivered the full application stack around the contracts: a frontend connected to on-chain state, and Node.js and TypeScript REST APIs for off-chain data.