Press
For journalists: bio, photo, the topics I comment on, talks and contact.
Gonçalo Magalhães
Head of Security at Immunefi, crypto security and AI expert
Short bio
Gonçalo Magalhães is Head of Security at Immunefi, the world's largest Web3 bug bounty platform. An aerospace engineer turned security leader, he has built and maintains several AI agents, many of them part of Immunefi's core products, serving many clients and thousands of users. He is based in Portugal.
Long bio
Gonçalo Magalhães is Head of Security at Immunefi, the world's largest Web3 bug bounty platform, where he leads company-wide security and the R&D team building AI security agents. He has built and maintains several AI agents, many of them part of Immunefi's core products, serving many clients and thousands of users.
An aerospace engineer turned security leader, he has more than eight years of experience writing production code. He served on the Arbitrum Security Council from 2024 to 2025.
He is active in the Web3 security community: he has taught at bootcamps, including RareSkills' Advanced Solidity Bootcamp, built CTFs and spoken at DEF CON's Bug Bounty Village, ETHDam, Devconnect and Common S3nse. He has been quoted by Decrypt, DL News, The Block, Cointelegraph and Tek Sapo, and comments on crypto hacks and scams, the security of AI agents, and AI's effect on people and markets. He is based in Portugal.
Topics I comment on
- Crypto hacks and thefts
- Crypto scams
- AI agent security
- New developments in the AI market
- AI's effect on people
- Bug bounties and responsible vulnerability disclosure
- Keeping crypto from being stolen (wallets, self custody)
- Security management at crypto companies
Talks
- Why Privacy Without Security is Theater
- Who audits the auditors? Can we trust security firms?
- Why you should be hunting on Web3 Bug Bounties
- Auditors & Bounty Hunters: who should secure your bags?
- The Hacker Mentality: What makes one Succeed in the Bug Bounty World
- Solidity's most common security pitfalls (and its best safeguards)
In the press
- crypto.newsBase vault’s $6M exploit exposes a disclosure gap: Immunefi
- Fast Company Middle EastWhy customer experience is the missing piece in cybersecurity
- Arabian BusinessDyson's $500 CameraJet toothbrush raises privacy questions. Should you be worried?
- Crowdfund InsiderStablecoins, Crypto Investing, & The Coldcard Hack: Digital Assets Thoughts Of The Week
- CoinjuiceCan a Hardware Wallet Generate a Weak Bitcoin Seed?
- The Crypto TimesAllbridge Core Hit by $1.65M Solana Flash-Loan Exploit, Its Second Since 2023