CEO @asymmetric_re, Web3 and AI Security Force Multiplier, Bug Hunter/Wrangler, FOSS Advocate, and Problem Solver. Simply walked to Mordor.
New York, USA
Joined August 2010
- Tweets6.2K
- Following1.4K
- Followers3.3K
- Likes3.8K
Jonathan Claudius retweeted
The recent OpenAI case shows that a serious compromise doesn't take much: with an insider, it just needs hardware that anyone can buy.
AR's Protective Services lead, Tom Matthews, explains how bug sweeps and screening work together to address risks like these.
The FBI recently arrested an @OpenAI engineer, accusing him of planting a covert recording device in the company’s executive conference room.
Today, the DEF team published an OPSeC security expert take from @asymmetric_re's Tom Matthews. He shares advice on how to defend your office's physical security.
defieducationfund.org/physic…
Hear more from our head of protective services on how bug sweeps and background checks could have helped prevent the OpenAI device plant case in your organization
The FBI recently arrested an @OpenAI engineer, accusing him of planting a covert recording device in the company’s executive conference room.
Today, the DEF team published an OPSeC security expert take from @asymmetric_re's Tom Matthews. He shares advice on how to defend your office's physical security.
defieducationfund.org/physic…
Hey, if you're having a good time with Crucible, our Solana program fuzzer, please let us know.
The asymmetric.com/crucible/ page is now starting to aggregate these, our first external mention is from @AdevarLabs, an early adopter of Crucible.
Jonathan Claudius retweeted
The @fund_defi OPSeC Repository now includes controls from STRIDE, the security program we launched earlier this year with @SolanaFndn.
Covering governance, infrastructure, supply chain, incident response, and more, they're searchable alongside various other open security standards.
Jonathan Claudius retweeted
Crucible, @asymmetric_re's Solana program fuzzer, is already hard at work.
Special thanks to @TimGarcia0 for being proactive here.
He’s the true hero of this story!
Jonathan Claudius retweeted
For its first 6 weeks on mainnet, Solana's governance program had a bug: any validator could silently erase its delegators' dissenting votes.
Without the fix, SGP-0002 would have failed by 0.02 percentage points.
We found it with Crucible. Full writeup ↓
The Firedancer bug bounty platform is live at bounty.firedancer.io! Now thru Nov 20th: 2x rewards across the board; 3x for Alpenglow.
We’re sharing our experience running a $1,000,000 bounty contest: how Firedancer’s security model works, notable bugs researchers found, what we learned, and some lessons about triaging AI-assisted reports at scale.
Read it here. jumpcrypto.com/resources/har…
Jonathan Claudius retweeted
The Firedancer bug bounty platform is live at bounty.firedancer.io! Now thru Nov 20th: 2x rewards across the board; 3x for Alpenglow.
We’re sharing our experience running a $1,000,000 bounty contest: how Firedancer’s security model works, notable bugs researchers found, what we learned, and some lessons about triaging AI-assisted reports at scale.
Read it here. jumpcrypto.com/resources/har…
Jonathan Claudius retweeted
New on the DSS 2026 agenda: @u_0x8888
“Valid Signatures, Fragile Accounts: PQC on Ethereum”
Explore the talk and add it to My agenda:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker announcement card for Magnus Woodgate: Valid Signatures, Fragile Accounts: PQC on Ethereum
Not many people know this, but our protective services arm at @asymmetric_re offer bug sweeps to address this exact risk.
Please reach out to learn more!
cnbc.com/amp/2026/10/13/open…
Just a heads up, our business development team is growing. If you have interest, you can apply here.
asymmetric.re/careers?ashby_…
I'll be on with @SteveCleanBrook from the @triton_one team in about 30min, if you wanna listen in.
xitter.cf/triton_one/status/2104…
Tomorrow, @SteveCleanBrook hosts @claudijd from @asymmetric_re on Pirates Parley! They will be talking about audits, exploits, hacks, operational security, physical security, and maybe even what STRIDE is.
Make sure to bring your questions to the livestream on YouTube or X!
Jonathan Claudius retweeted
Tomorrow, @SteveCleanBrook hosts @claudijd from @asymmetric_re on Pirates Parley! They will be talking about audits, exploits, hacks, operational security, physical security, and maybe even what STRIDE is.
Make sure to bring your questions to the livestream on YouTube or X!
Jonathan Claudius retweeted
the vast majority of security holes on solana today aren't program exploits or infrastructure vulnerabilities.
most teams do not have a meaningful way of thinking about security and their security posture
this is why @asymmetric_re and @SolanaFndn have built STRIDE - a protocol-wide security program for all solana projects
this is a massive initiative that everyone building on solana has to take advantage of. by doing this, not only are you securing your business, but securing the network as a whole
