Kristian kristianism

I build financial systems that can prove they are correct

I'm Kristian, a financial systems developer working where capital, code, and security meet. I design and ship auditable on-chain and off-chain financial infrastructure: Solidity protocols, corporate treasury automation, and the monitoring and forensic tooling needed to explain every movement of funds after the fact.

I hold CrFA and CFC credentials and a BS in Management Accounting, so the accounting rigor is part of the design, not a review step at the end. In practice that means smart contracts where a rounding error is a liability, treasury flows that reconcile by default, and monitoring that surfaces failures while they are still actionable.

Focus	Protocol engineering, DeFi architecture, forensic accounting, on-chain security
Credentials	CrFA · CFC · BS Management Accounting
Core stack	Solidity, Foundry, Hardhat · TypeScript, Node.js, Next.js, React · Python · n8n, Xero, PostgreSQL
Availability	Selectively available for protocol engineering, security reviews, and DeFi build or advisory engagements
Contact	X · Telegram · Discord

Selected work

Public repositories, described from their own READMEs. Status lines state exactly what has and has not been reviewed or deployed.

Zero-Balance Corporate Sweep Module

Solidity 0.8.24 Foundry Safe Aave V3

A Safe module that sweeps idle ERC-20 operating balances above a threshold into Aave V3 and withdraws exact shortfalls just in time for planned payments.

Relayer JIT withdrawals require a Safe-set, amount-bound, expiring intent. Relayers can top up the Safe but never execute payments.
Per-call sweep caps, JIT caps, and a shared relayer cooldown. Validates aToken wiring and Pool reserve registration. No delegatecall.
Unit, fuzz, invariant, Ethereum mainnet-fork, and Safe v1.4.1 proxy integration tests.

_{Status: reference implementation with an internal security review. No independent professional audit.}

The Factory

Solidity 0.8.36 Foundry OpenZeppelin 5

A smart contract toolkit of small, readable templates created as minimal proxy clones from paused-by-default factories: ERC-20 (standard and tax), ERC-721, vesting wallets, registration and Merkle airdrops, and staking reward farms.

Two-step ownership acceptance across factories and clones, ERC-2612 permit on the ERC-20, and an owner-controlled UUPS fee collector.
Documented security review with twelve findings patched and each tied to a named regression test, including reward-as-principal drains, taxed-deposit liabilities, and donation dilution.

_{Status: contract repository, not a finished product. Manual review plus Foundry regression and fuzz tests; not an independent audit. No deployment of the patched release has been performed.}

Discord to n8n Bridge

TypeScript Node.js 20 Docker

A persistent service that holds a Discord Gateway connection, normalizes created and edited messages into a versioned JSON envelope, and delivers them to an n8n webhook that owns routing.

Idempotency keys per create and edit, exponential backoff with jitter that honors Retry-After, and bounded in-flight deliveries with load shedding.
Guild and channel allowlists, bot and webhook loop prevention, redacted structured logs, and graceful shutdown that drains in-flight deliveries.

_{Status: deployable service, one instance per bot and n8n webhook, configured entirely through environment variables.}

What I work on

Protocol & smart contracts	Solidity systems for yield, launchpads, bonding curves, account modules, and Safe modules.
Treasury & automation	On-chain corporate treasury, zero-balance sweeps, Just-In-Time OpEx funding, and n8n and Xero financial workflows.
Security & forensics	Threat modeling, on-chain monitoring, smart contract review, forensic accounting, and investigation.
Full-stack delivery	Next.js and React dashboards, Web3 frontends, TypeScript and Node.js services, shipped end to end.

Stack

Smart contracts	_{Solidity · Foundry · Hardhat}
Languages	_{TypeScript · JavaScript · Python · CSS}
Full-stack	_{Next.js · React · Tailwind CSS · Node.js}
Automation & data	_{n8n · PostgreSQL · Xero · QuickBooks}
Tooling	_{Visual Studio Code · Docker · Raspberry Pi}

Operating principles

`01` Correctness over cleverness	Exact shortfall math, immutable non-upgradeable modules, pinned dependencies, and no `delegatecall` where a plain call will do.
`02` Audit trails by default	Events treated as operational evidence and reconciled against token transfers and balances. Structured logs that redact secrets and message content.
`03` Threat model first	Contract repositories document the trust model and each actor's authority alongside the interface. Contributions need a threat model and regression tests to be considered.
`04` Composable over bespoke	Safe modules instead of custom wallets, minimal proxy clones instead of one-off deployments, n8n as the routing layer instead of hand-rolled workflow code.
`05` Measure what ships	Unit, fuzz, invariant, and mainnet-fork tests. Each security finding is closed with a named regression test, and each README states what the tests do not cover.

Activity

Contact

Building something where capital meets code, or need a second pair of eyes on one? Reach out.

Navigation Menu