All-around technology enthusiast with a passion for both emerging tech and historical innovations. With over a decade of experience spanning from COBOL in banking to cutting-edge Web3 development, I'm constantly challenging myself with new technologies. My journey has taken me from Python as a hobby to professional Solidity development, embodying the transition from legacy systems to blockchain innovation.
From the 🦕dinos🦖 to the 🚀moon🌘 and beyond!
Engineering Manager for on-chain security tooling at Olympix.ai. We build BugPocer, which finds smart contract vulnerabilities and writes the PoC to prove them, plus symbolic execution, fuzzing and invariant checking. Most of my day goes into making it find more real bugs, fewer fake ones, and cheaper to run.
- Own the roadmap for BugPocer (AI exploit generation), symbolic execution, Bounded Adversarial Verification (BAV) and the invariant verifier
- Push accuracy up and cost down by grounding AI findings in symbolic and formal methods
- Run backtests against real audits and exploits, CI and release testing
- Still hands-on in the code
- Wrote static-analysis detectors and backtested them against audit-contest datasets and live exploits
- Built BugPocer, the AI engine that writes a working PoC for each vulnerability it reports
- Designed fuzzing and invariant-driven strategies (BAV) and formal-verification spec generation
- Mutation testing and AI-generated unit tests
- Pre-audits for leading protocols, every finding reviewed by hand with a working PoC
- Contributor to the EEA EthTrust Security Levels v3 spec
- Reviewer for the BSSC Smart Contract Security Standard v2
- ETH Security badge holder (#94)
At Lossless, I played a key role in developing blockchain security products aimed at making the DeFi ecosystem more secure:
- Aegis: An early alert system that analyzes blockchain transactions in real-time, applying various strategies and machine learning models to determine risk levels.
- Lossless Core Protocol: An on-chain solution for hack mitigation, allowing for features like fund draining prevention and malicious transaction reporting.
- Lossless Vault Protection System: A complementary system to the Core Protocol, enhancing security for DeFi vaults.
- Wrapped ERC20 tokens: Developed Lossless Wrapped ERC20s to allow easier integration of the Lossless Core Protocol with existing tokens.
- WERC20 Extensible tokens: Created a new standard for wrapped tokens, allowing for the installation of smart contract extensions without redeploying the core contract.
Key responsibilities included smart contract development, recursive testing, hack/exploit mitigation and analysis, new feature implementation, audit interaction, R&D, and backend development using NestJS.
Provided Solidity development, auditing, and consulting services for various blockchain projects. Responsibilities included:
- Developing and auditing BEP20 and ERC20 tokens
- Providing ICO roadmap and tokenomics coaching
- Creating whitepapers and React Native dApps
- Languages: Solidity, TypeScript, Python, COBOL, C#
- Security: Static Analysis, Fuzzing, Symbolic Execution, Formal Verification, AI/LLM exploit generation
- Blockchain: Smart Contract Development, Security Auditing, DeFi
- Technologies: Foundry, Hardhat, Nest.js, React, FastAPI, PostgreSQL, GraphQL
- Legacy Systems: Mainframe, DB2, CICS, JCL
For a complete overview of my professional experience, please visit my LinkedIn profile.
Interested in Web3 security, smart contract development, or bridging the gap between traditional and blockchain technologies? Let's connect and explore potential collaborations!