The real gap isn't uncertainty, it's juniors absorbing takes from people who've already cashed out. They're getting pessimism filtered through someone else's exit strategy, not actual market conditions. You want founders and security leads talking, not marketing departments pretending to have skin in the game.
Here’s what I’d do if I were starting web3 security in June 2026
There’s too much uncertainty and pessimism floating around web3 circles these days, and it’s especially demotivating for juniors and newcomers who take Anthropic/OpenAI’s marketing stunts word for word, 0 critique
In reality, there has never been a better time to start with web3 security
We’re in a deadly bear market rn, but this is temporary
Once the market picks up, it’s going to be Las Vegas again
Here are some things you can start doing:
i) Learning in public never died, and it’s still the number 1 technique to put your name forward. However you start and whatever you do, make sure to post daily, preferably multiple times a day. Just document your journey. Stuff like what I’ve learned that I did not know yesterday.
ii) Back in the day, I used to find a bug or notice a design deficiency and then try reaching out to a project to establish communication in hopes of building a relationship with them. Needless to say, with manual audits and manual testing, it took a lot of time to achieve this. Today you can literally provide so much value to projects with a Claude subscription and a bit of prompting. If you haven’t noticed an abnormal amount of hacks happening, you’ve been living under a rock. Everyone’s going to improve massively with AI, and we’re currently in a transitioning period, so better use this, and you can be the person who’s adopting new tech and knows how to use it.
iii) Comes as no surprise, but every web3 security agency is looking to implement AI workflows. If you’re the know-how guy, there’s your chance of landing an internship and start contributing.
Good luck!