Monad Co-Founder Pushes Security Guidance and Ultrafuzz Tool

Monad co-founder Keone Hon has urged crypto teams to prioritize operational security, sharing guidance and promoting the foundation's open-source Ultrafuzz tool as attackers gain access to more capable AI tools. According to CryptoNews, Hon encouraged developers to run Ultrafuzz on their contracts and strengthen operational security measures across teams.

Operational Security Guidance

Monad’s OpSec guide addresses everyday vulnerabilities, including phishing, credential management, employee devices, and third-party account permissions. The guide cites ChainLight’s Lumos tracker, which recorded $3.31 billion in exploited value from control hijacking compared to $983 million from smart-contract vulnerabilities across incidents tracked from January 2023 to the guide’s reporting cutoff. Recommendations include separating personal activity from work devices, maintaining clean computers or browsers for crypto activity, and using hardware security keys with securely stored backups for critical accounts.

Ultrafuzz Tool Integration

Open-sourced in September, Ultrafuzz coordinates specialized AI agents to examine contracts, map user behavior, investigate security properties, run testing strategies, and prepare findings for review. Monad stated that more than 20 runs on ecosystem projects helped shape the release, which supports Solidity and Vyper. Developers have been advised to run the tool on disposable, isolated virtual machines due to its unrestricted permissions.

Key facts

• Monad co-founder Keone Hon urged crypto teams to make security their top priority.
• The open-source Ultrafuzz tool coordinates specialized AI agents to examine smart contracts.
• ChainLight’s Lumos tracker recorded $3.31 billion in exploited value from control hijacking.
• Monad's OpSec guide covers phishing, credential management, employee devices, and third-party account permissions.