{
  "$schema": "https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json",
  "basics": {
    "name": "Benjamin Halimic",
    "label": "Senior Software Engineer",
    "email": "benjaminxh@gmail.com",
    "image": "https://bxmmm1.github.io/assets/avatar.jpg",
    "url": "https://bxmmm1.github.io/",
    "summary": "Senior software engineer who builds and secures onchain financial systems, from the smart contracts to the tooling that deploys and runs them. Open to offers. As lead engineer at Puffer Finance I architected and wrote the pufETH liquid restaking vault on EigenLayer and its supporting contracts: a customised ERC-4626 vault that peaked at ~$1.8B TVL and was upgraded from V1 to V5 on Ethereum mainnet with no smart contract hacks or incidents. I ran security audits end to end with nine firms and platforms. At Veda (Dec 2025 to Oct 2026) I built Rust tooling with AI agents that automates the deployment and setup of Boring Vaults and proprietary smart contracts, deployed Boring Vaults across EVM chains, and created and reviewed admin transactions. My own security setup: hardware wallets for all signing, enforced commit signing and a published PGP key. Early adopter of AI agents who designs agentic workflows; with AI, a full-stack developer who ships frontend as well as contracts and backend. Built high-performance, scalable web2 backend systems since May 2016 (TypeScript, Go, PHP), and moved into fintech as a Senior Backend Developer at Mukuru.",
    "location": {
      "region": "Europe (Central European Time, CET/CEST, UTC+1/+2)",
      "remote": true
    },
    "profiles": [
      {
        "network": "GitHub",
        "username": "bxmmm1",
        "url": "https://github.com/bxmmm1"
      },
      {
        "network": "LinkedIn",
        "username": "benjamin-halimic",
        "url": "https://www.linkedin.com/in/benjamin-halimic/"
      },
      {
        "network": "Telegram",
        "username": "bxmmmm",
        "url": "https://t.me/bxmmmm"
      },
      {
        "network": "X",
        "username": "bxmmm",
        "url": "https://x.com/bxmmm"
      },
      {
        "network": "dev.to",
        "username": "bxmmm1",
        "url": "https://dev.to/bxmmm1"
      }
    ]
  },
  "work": [
    {
      "name": "Veda",
      "url": "https://veda.tech",
      "position": "Senior Software Engineer",
      "startDate": "2025-12",
      "summary": "Veda provides the vault infrastructure behind enterprise Earn products. Its BoringVault standard powers Kraken DeFi Earn, MetaMask Money Account, EtherFi Liquid, Lido Earn and Plasma One; $32B+ in volume for 320K+ users across EVM chains and Solana; $1M Immunefi bug bounty. Most of this work was in closed-source repositories and is under NDA: it can be discussed at a high level only, without code or confidential details.",
      "highlights": [
        "Deployed Boring Vaults across multiple EVM chains (BoringVault: Veda's Merkle-verified vault architecture with separate manager, teller and accountant contracts).",
        "Built Rust tooling with AI agents that automates the deployment and setup of Boring Vaults and proprietary smart contracts.",
        "Worked on Veda's Solana tooling.",
        "Created and reviewed admin transactions for a range of Boring Vaults.",
        "Code audited by Certora."
      ],
      "endDate": "2026-10"
    },
    {
      "name": "Puffer Finance",
      "url": "https://www.puffer.fi",
      "position": "Lead Engineer",
      "startDate": "2023-06",
      "endDate": "2025-11",
      "summary": "Liquid restaking protocol on EigenLayer that lowers the capital needed to run an Ethereum validator.",
      "highlights": [
        "As lead engineer, architected and wrote pufETH (a liquid restaking token and customised ERC-4626 vault on EigenLayer) and its supporting contracts; the vault peaked at ~$1.8B TVL.",
        "Designed and ran the longest-running vampire attack on Lido: the vault accepted ETH and stETH, and stETH was systematically redeemed for ETH to spin up Puffer validators. Verifiable on-chain: pufETH still accepts stETH deposits and converts them to ETH.",
        "Shipped successive mainnet upgrades through upgradeable proxies (vault V1 to V5); deployed contracts on L1 and L2; no smart contract hacks or incidents.",
        "Ran security audits end to end (scoping, price negotiation, fixes, final reports) with Nethermind, Trail of Bits, BlockSec, Cantina/Spearbit, Quantstamp, The Creed, SlowMist, Immunefi and Certora.",
        "Defined system invariants; wrote fuzz and mainnet-fork tests; set up BlockSec Phalcon to auto-pause the protocol on invariant breaks.",
        "Built Merkle-tree reward distribution, ERC-20s, subgraphs, deployment scripts and on-chain automation.",
        "Was a proposer and owner on multiple Safe multisigs with strict operational security; wrote runbooks and guides, and handled live frontend incidents.",
        "Oversaw all smart contract work, interviewed backend and smart contract engineers, mentored junior developers."
      ]
    },
    {
      "name": "Backend engineering (pre-web3)",
      "position": "Backend Engineer",
      "startDate": "2016-05",
      "endDate": "2023",
      "summary": "Designed and built high-performance, scalable backend systems in TypeScript/JavaScript, Go and PHP; SQL, NoSQL and Redis; monoliths, microservices and event-driven architecture; Docker, Docker Compose and CI/CD pipelines; monitoring with Sentry and Datadog.",
      "highlights": [
        "Senior Backend Developer at Mukuru (https://www.mukuru.com), a Cape Town fintech founded in 2004 that moves money across borders for migrant workers and their families; it now serves 17M+ customers across Africa, Asia and Europe with remittances, payments and cards. This is where I stepped into fintech and started working on financial systems."
      ]
    }
  ],
  "skills": [
    {
      "name": "Smart contracts",
      "keywords": [
        "Solidity",
        "ERC-4626",
        "ERC-20",
        "Upgradeable proxies",
        "OpenZeppelin",
        "Merkle trees",
        "Safe multisig and modules",
        "EigenLayer"
      ]
    },
    {
      "name": "Build and test",
      "keywords": [
        "Foundry",
        "Cast",
        "Anvil",
        "Hardhat",
        "Invariant testing",
        "Fuzzing",
        "Mainnet-fork tests",
        "Deployment scripts",
        "Solana tooling"
      ]
    },
    {
      "name": "Security and monitoring",
      "keywords": [
        "Hypernative",
        "Slither",
        "Echidna",
        "Certora",
        "Tenderly",
        "BlockSec Phalcon",
        "Hexagate",
        "Immunefi",
        "PagerDuty",
        "Incident response",
        "Audit management"
      ]
    },
    {
      "name": "Frontend and data",
      "keywords": [
        "Frontend (AI-assisted)",
        "viem",
        "ethers.js",
        "Subgraphs",
        "Etherscan",
        "Beacon chain explorers",
        "On-chain automation"
      ]
    },
    {
      "name": "Languages and backend",
      "keywords": [
        "Rust",
        "Alloy",
        "TypeScript",
        "Python",
        "Go",
        "JavaScript",
        "PHP",
        "SQL",
        "NoSQL",
        "Redis",
        "Microservices",
        "Event-driven architecture",
        "Docker",
        "Docker Compose",
        "CI/CD",
        "Sentry",
        "Datadog"
      ]
    },
    {
      "name": "AI and agents",
      "keywords": [
        "AI agents",
        "Agentic workflows",
        "Multi-agent setups",
        "Full-stack development with AI"
      ]
    }
  ],
  "projects": [
    {
      "name": "PufferFinance/puffer-contracts",
      "url": "https://github.com/PufferFinance/puffer-contracts",
      "description": "Production restaking contracts and 23 public audit reports."
    },
    {
      "name": "PufferFinance/pufETH",
      "url": "https://github.com/PufferFinance/pufETH",
      "description": "The original pufETH vault, V1 (archived)."
    },
    {
      "name": "safe-recovery-module",
      "url": "https://github.com/bxmmm1/safe-recovery-module",
      "description": "Social-recovery module for Safe smart-contract wallets."
    },
    {
      "name": "safe-module-template",
      "url": "https://github.com/bxmmm1/safe-module-template",
      "description": "Foundry starter template for building Safe modules."
    },
    {
      "name": "eth-parser",
      "url": "https://github.com/bxmmm1/eth-parser",
      "description": "Chrome extension that turns raw ETH values into a human-readable format."
    }
  ],
  "publications": [
    {
      "name": "Transactionless scam",
      "publisher": "dev.to",
      "releaseDate": "2023-02-09",
      "url": "https://dev.to/bxmmm1/transactionless-scam-27il"
    },
    {
      "name": "Damn Vulnerable DeFi v3 #15: ABI Smuggling solution",
      "publisher": "dev.to",
      "releaseDate": "2023-01-27",
      "url": "https://dev.to/bxmmm1/damn-vulnerable-defi-v3-15-abi-smuggling-solution-4e4m"
    },
    {
      "name": "Safe recovery module",
      "publisher": "dev.to",
      "releaseDate": "2022-12-18",
      "url": "https://dev.to/bxmmm1/safe-recovery-module-1mf"
    },
    {
      "name": "Best Solidity practices (with examples)",
      "publisher": "dev.to",
      "releaseDate": "2022-12-11",
      "url": "https://dev.to/bxmmm1/best-solidity-practices-with-examples-1m5m"
    }
  ],
  "references": [
    {
      "name": "Jason Vranek, CTO at Puffer Finance (managed Benjamin directly; LinkedIn recommendation, Nov 2025)",
      "reference": "Ben is a rockstar. He joined as one of Puffer's first Solidity developers and it's safe to say that it's due to his mastery of the language and expertise in best security practices that Puffer never had any security issues. Ben is quick to identify what's needed to get the job done. This meant going above and beyond the job description which is so important in a fast-paced startup, e.g., helping to drive the team's Rust development. Beyond development, Ben is dependable as a team player. His humor cannot be overstated and is something you just have to witness firsthand but was essential for team morale. 10/10 would recommend Ben to anyone lucky enough to work with him."
    },
    {
      "name": "William Tobin, Lead Smart Contract Engineer at Veda (managed Benjamin directly; LinkedIn recommendation, Oct 2026)",
      "reference": "Benjamin is a brilliant engineer with a deep understanding of the evm, smart contracts, and DeFi. He is an independent, adept problem solver, and he always produces results."
    },
    {
      "name": "Shayan Eskandari, Postdoc at Nova SBE (senior to Benjamin; LinkedIn recommendation, Nov 2025)",
      "reference": "Ben has a great security-aware mind for smart contract design and programming. He creates intertwined tools for forking mainnet, testing every detail of every change, and understand the underlying technology of the EVM/Ethereum. I enjoyed working with him--and his cat. 5 stars :)"
    },
    {
      "name": "Devin Glover, Smart Contract Engineer (senior to Benjamin; LinkedIn recommendation, Sep 2026)",
      "reference": "Ben has a great mind for engineering and is a pleasure to work with! Throughout my time working with him, he was always giving 100% while staying level-headed and improving existing systems rather than being content to leave them just functional. I hope to work with him again and know he would make a fine addition to any dev team!"
    },
    {
      "name": "Cristiano Silva, Web3 Security Manager, Nethermind Security (on the Puffer team, Apr 2024)",
      "reference": "The Puffer team exemplifies professionalism in every aspect. Their commitment to excellence is evident in their meticulous maintenance of a high-quality codebase complemented by comprehensive documentation. In our experience, their responsiveness to inquiries during audits has been exceptional."
    },
    {
      "name": "Teammates from Puffer Finance and Veda",
      "reference": "Available on request."
    }
  ],
  "meta": {
    "onchainProof": {
      "deployer": "0xb7d83623906ac3fa577f45b7d2b9d4bd26bc5d76",
      "signatureVerification": "https://etherscan.io/verifySig/276929",
      "signedMessage": "d844e9b24b619cf34ef27c142de6a9073f31c83e8adf1d3cdb98db72f55f98a8",
      "signedMessageIs": "keccak256(\"Hello from Benjamin :)\"), signed without the 0x prefix",
      "hashDerivation": "https://app.warp.dev/block/I2wY28qdgF1C9nBBaXpfjh",
      "keyStatus": "The Puffer deployer key has since been wiped from the hardware wallet."
    },
    "lookingFor": "Senior engineering roles across the stack (smart contracts and protocols, backend, frontend), and focused freelance work.",
    "securityPractices": [
      "Hardware wallets required for all signing",
      "Signed Git commits enforced on GitHub",
      "Former proposer and owner on Puffer's production Safe multisigs",
      "Puffer deployer key wiped from hardware wallet",
      "PGP public key published on GitHub profile"
    ]
  }
}