372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
So example would be like in Go, if you run an action and it has the potential to error, you always equal that error and then you have to check that error, right?
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
So if you're not doing those things, there's a good chance that you could run an operation, not check the error and continue on with like depositing funds into someone's wallet or something like that.
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
And it's a, I would say some folks roll their eyes at linting, but I personally find that it's actually quite valuable to like be strongly automatic to the language that you're writing in.
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
For example, like if I have a pet project that is like my own personal finance app, yeah, I'm going to vibe code the whole thing and eat it to whatever, right?
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
But for the sake of other projects, it really just depends on some of the decisions that they're making inside the project and what are the risk parameters.
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
But the only way that you can ship fast is that if you feel reasonably confident that making a mistake along the way is not going to cost you millions and millions of dollars.
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
So the sort of like the fundamental principle that we're trying to bake into these long-term engagements that we work with clients is a sense of defense in depth, right?
372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research
So if I told you that I'd be willing to ship code, you know, maybe once a week or even live, if I knew that there was some sort of risk system or there was like an in-protocol variant that would always be respected, meaning that like maybe I can't ever spend more than $100,000 in the wrong direction in any given day.