Skip to content
View broccolirob's full-sized avatar
🥦
🥦

Block or report broccolirob

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
broccolirob/README.md

Robert Schneider

Blockchain solutions engineer | former Trail of Bits consultant | APIs, integrations, security, and developer tooling

I help blockchain and digital-asset companies turn complex protocol, integration, and security questions into solutions that customers and engineering teams can act on.

I bring 10 years of software engineering, 6+ years of client-facing technical consulting and delivery, 4 years in EVM/DeFi security, and 2 years at Trail of Bits. My strongest work sits between customers, product, and engineering: understanding requirements, designing integrations, troubleshooting unfamiliar systems, building prototypes and developer tools, documenting technical decisions, and guiding implementation.

LinkedIn · Work sample · SuperDroids ·

At a glance

  • Contributed to over 50 protocol security assessments and helped secure over $2B in on-chain value.
  • Public security reviews include Franklin Templeton's tokenized fund, Seaport / OpenSea, the Immutable zkEVM Bridge, Maple Finance V2, Balancer, Frax, LooksRare, and Uniswap fee distribution.
  • Built a public REST API and three point-of-sale integrations that opened approximately $112K in annual revenue and saved more than 40 weeks of custom engineering work.
  • Led engineering work associated with a 50% productivity improvement and designed a distributed job-queue service that reduced infrastructure costs 95%.
  • Reported a high-severity Code4rena finding in Stader.

Featured solutions

Project Problem addressed What it demonstrates
Ledgerline Paid APIs and AI agents need auditable revenue capture, recognition, allocation, and verification. End-to-end integration architecture spanning x402 payments, Postgres, double-entry accounting, Solidity contracts, Merkle commitments, testnet deployment, an independent verifier, and integration documentation.
Solidity Audit Graph Protocol reviewers need reliable answers about cross-contract calls and state dependencies that grep cannot provide. Python, Slither, Neo4j, Cypher, and 15 read-only MCP tools with bounded queries, database-enforced permissions, telemetry, automated tests, and real-audit validation.
Blockchain Security Work Sample Engineering and risk stakeholders need findings they can understand, evaluate, and remediate. Public Trail of Bits review reports and a Code4rena high-severity finding across DeFi, bridges, marketplaces, RWAs, and token systems.
RAG Hygiene Scanner Teams need to detect unsafe or sensitive material before it enters a retrieval index. A configurable Python CLI with CI gating, JSON/CSV output, severity thresholds, tests, documentation, and security-framework mapping.
Meridian Reviewers need a navigable model of an unfamiliar codebase rather than disconnected model output. A pre-release pipeline combining static analysis and agents to generate code notes, execution flows, attack-surface maps, risks, diffs, and diagrams.

How I approach customer-facing technical work

  1. Discover: understand the business objective, technical environment, users, constraints, and definition of success.
  2. Design: map system boundaries, data flows, trust assumptions, integration points, failure modes, and operational responsibilities.
  3. Prove: build a testable prototype, walkthrough, or evidence-backed technical recommendation.
  4. Enable: provide documentation, implementation guidance, verification steps, monitoring requirements, and a clear handoff.

Core capabilities

Solutions and integrations: technical discovery, requirements mapping, integration architecture, REST APIs, webhooks, troubleshooting, prototypes, implementation guidance, technical documentation, and developer enablement

Blockchain: Solidity/EVM, DeFi lending and accounting, tokenized assets and RWAs, oracles, bridges, wallets, L1/L2 systems, governance, access control, and upgradeability

Engineering: Python, TypeScript/JavaScript, SQL, distributed systems, PostgreSQL, Docker, AWS, Linux, and GitHub Actions

Security and AI: threat modeling, exploit analysis, fuzz and invariant testing, static analysis, MCP, LLM APIs, RAG, permission boundaries, observability, and human-in-the-loop controls

Current focus

I am pursuing Solutions Engineer, Sales Engineer, and Solutions Architect roles at blockchain infrastructure, digital-asset, security, and compliance companies.

I am particularly interested in roles where deep technical credibility supports customer discovery, integration design, technical evaluation, developer enablement, and successful implementation.

Pinned Loading

  1. work-sample work-sample Public

    Selected security-review reports and findings from Trail of Bits and public competitions.

  2. solidity-audit-graph solidity-audit-graph Public

    Neo4j code-property graph and read-only MCP server for cross-contract security reasoning in Solidity.

    Python

  3. meridian meridian Public

    Agentic codebase analysis that turns repositories into audit-ready workspaces using static analysis, code graphs, and LLM synthesis.

    Python

  4. ledgerline ledgerline Public

    Revenue infrastructure for paid AI/API calls: x402 capture, double-entry accounting, Merkle anchoring, and independent verification.

    TypeScript

  5. rag-hygiene-scanner rag-hygiene-scanner Public

    CI gate for RAG corpora: detects prompt-injection indicators, risky markup, PII, and secret-like content.

    Python