372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research

I sat down with Jonathan Claudius from Asymmetric Research to talk about the security landscape in Web3. We covered the new vulnerabilities emerging from LLMs and AI agents, the easy wins every founder should implement today, and why security can't be confined to a two-week audit window. Jonathan shares real examples from their work with the Interchain Foundation, explains how to balance shipping speed with security rigor, and gives practical advice on building defense in depth. If you're building in this space, this conversation will change how you think about security. • [01:03] How Asymmetric Research started from Jump Crypto and their shift to commercial engagements• [04:52] Real incident: Preventing a DPRK hacking group infiltration at Interchain Foundation• [08:18] New security threats from LLMs and AI agents - the offense vs defense arms race• [10:08] Bug bounty programs seeing high-quality submissions from LLM-enabled attackers• [13:46] Easy wins: Branch protection, security keys, linting, and static analysis tools• [16:24] Balancing speed and security through defense in depth strategies• [18:35] OpenClaw and AI agents creating new attack vectors like prompt injection• [22:14] Laptop security basics: MDM and EDR solutions every team needs• [25:19] Why Asymmetric focuses on human connection over productization• [29:14] Founder lessons: Building finance and BD systems earlyAsymmetric Research Website: https://asymmetric.reAsymmetric Research Careers: https://asymmetric.re/careerTwitter/X: https://x.com/asymmetric_reNothing mentioned in this podcast is investment advice and please do your own research. It would mean a lot if you can leave a review of this podcast on Apple Podcasts or Spotify and share this podcast with a friend. Be a guest on the podcast or contact us - https://www.web3pod.xyz/