Gustavo Grieco
Web3 Sec. Engineer (exTOB)
Motivation
The Security Council plays a critical role in protecting the protocol during emergency actions and governance-approved upgrades. Effective decisions require both deep familiarity with the system and strong technical judgment when evaluating security-sensitive situations.
One area I believe will become increasingly important is the use of AI-assisted security tooling and agent-based analysis to strengthen smart contract and protocol security for the Arbitrum infrastructure. Recent advances in AI systems are making it possible to augment traditional auditing techniques with automated reasoning, vulnerability discovery, and continuous monitoring. If used carefully, these approaches could significantly improve our ability to detect and prevent vulnerabilities in complex systems like Arbitrum and Stylus.
As a member of the Security Council, I would advocate for exploring and leveraging state-of-the-art security techniques, including emerging AI-based approaches, while remaining vendor-neutral and focused on open, security-first practices.
Combined with my experience auditing the protocol and working extensively with fuzzing and formal verification tools, I hope to help ensure Arbitrum continues to operate with the highest possible security standards.
Experience
My work focuses on identifying and preventing vulnerabilities in blockchain infrastructure and decentralized applications.
Over the past decade I have performed security reviews across a wide range of systems including: L2 infrastructure, stablecoins, lending protocols, decentralized exchanges, wallet infrastructure and core smart contract systems.
Within Arbitrum specifically, my work has included reviewing multiple generations of the protocol stack.
I was also part of the Trail of Bits team that audited the smart contracts used for this Security Council election, where we identified a low-severity issue during the review. I have also proven experience reviewing governance actions and emergency upgrades for Nitro/Stylus while at TOB, later overseen by the Security Council.
Beyond audits, I contribute to the broader Ethereum security ecosystem through open-source tooling such as echidna and hevm, which are widely used for fuzz testing and formal verification of smart contracts.
Skills
Cybersecurity
9
Projects
Security Expert elected by the ArbitrumDAO for the Arbitrum Audit Program