~/gonçalo — zsh
LIVE
$
$
$
$
$
Gonçalo Magalhães
Gonçalo Magalhães - Anime
01

Experience

$ experience --featured --format=cards
Immunefi logo
ImmunefiCurrent
Head of Security
July 2022 - Present4 roles
Head of Security
Mar 2024 - Present

Leading company-wide security management, R&D/ML team building AI security agents, incident response, and SOC 2 Type 2 compliance. Shaping security products for the on-chain economy.

Smart Contract Lead Engineer
Apr 2023 - Apr 2024

Led Web3 and Smart Contract technical team. Product architecture, security best practices, hosted Hacker Hangouts, and represented Immunefi at industry events.

Smart Contract Triager
Nov 2022 - May 2023

Reviewed and triaged smart contract vulnerability reports, assessed severity and impact, provided mediation between protocols and hackers.

Whitehat Hacker Scholar
July 2022 - Nov 2022

3-month scholarship to hunt for bugs full-time. Code reviewing, smart contract auditing and security researching.

Arbitrum DAO logo
Security Council Member
Sept 2024 - Nov 2025
Security Council Member
Sept 2024 - Nov 2025

Served on the 9/12 multisig securing Arbitrum, the #1 L2 blockchain with $12B+ TVL. Emergency response, security consultation, and incident response.

RareSkills logo
Advanced Solidity Instructor
Dec 2023 - Mar 2025
Advanced Solidity Instructor
Dec 2023 - Mar 2025

Teaching the 22-week Advanced Solidity Bootcamp covering AMMs, fuzzing, security, EVM assembly, proxies, elliptic curve cryptography, and DeFi lending.

Instituto Superior Técnico logo
Master of Science, Aerospace Engineering
2014 - 2019
Master of Science, Aerospace Engineering
2014 - 2019

Aeronautics and Astronautics. Portugal's top engineering school.

03

Speaking & Media

$ cat speaking_events.log
$ cat media_mentions.log
O'Reilly - Mastering Ethereum 2nd Edition
O'Reilly - Mastering Ethereum 2nd EditionNovember 2025

Featured Quote on Back Cover

I've taught crypto devs for many years. If you want to go from zero to hero in smart contracts, Mastering Ethereum is the definitive no-fluff guide I recommend above all to achieve that.
Help Net Security
Help Net SecurityJuly 2025

Hacking Back: Why Offensive Cyber Operations Are a Legal Minefield

This is why firms should focus on operating under frameworks that prevent these scenarios entirely, like scaling bug bounty programs that channel security efforts into authorized, constructive activities. When security researchers work within this framework, they're protected legally, companies get stronger security, and innocent third parties are never put at risk.
Cointelegraph Magazine
Cointelegraph MagazineApril 2024

Lazarus Group's favorite exploit revealed — Crypto hacks analysis

[North Korean hackers] focus on a small number of high-value targets and can play a very long game, combining detailed technical knowledge with social engineering and spear-phishing capabilities.
Immunefi - Medium
Immunefi - MediumJanuary 2023

Hack Analysis: 0xbaDc0dE MEV Bot, September 2022

In this article, we will be analyzing the exploited vulnerability in the 0xbad smart contract without looking at any actual source code. We'll analyze the massive profit arbitrage transaction and see what we can learn from there, but also try a few decompiling tools to help us reach the same conclusion as the hacker.
AstroPublishing
AstroPublishingMarch 2017

Two probes will explore the early Solar System

The points derive from the three-body problem, which considers the gravitational pull of just two bodies (in this case, the Sun and Jupiter), and then the few points where smaller points can remain stable are found through algebraic methods. The Trojan asteroids are celestial bodies that gathered around Jupiter's L4 and L5. The Lucy mission is crucial to understanding the history of the solar system.
04

Contact

$ establish_connection --secure
CHANNEL OPEN

Let's Connect

Interested in Web3 security, AI, or potential collaboration? Feel free to reach out through any of these channels.

Typical response time: 24-48 hours