gm
.careers
Back to Blog

Onboarding in Web3: How Top Protocols Set New Hires Up for Success

Best practices for onboarding new hires at Web3 companies — remote onboarding playbooks, security training, tooling setup, culture integration, and 30-60-90 day plans.

gm.careers TeamFebruary 11, 202617 min read
Share:TwitterLinkedIn

Onboarding at a Web3 company is not the same as onboarding at a traditional tech company with a blockchain team. The differences are structural, not cosmetic. Your new hire is joining a remote-first organization where compensation includes tokens they need to understand and manage, where a single security mistake can drain millions from a smart contract, where the tooling stack runs on Discord and Telegram instead of Slack and Jira, and where the codebase interacts with immutable, financially consequential infrastructure.

Companies that treat Web3 onboarding as a standard tech onboarding process with some crypto sprinkled on top lose new hires in the first 90 days — or worse, keep them but never get them to full productivity. The protocols that retain top talent have purpose-built onboarding systems that address the unique demands of building in this space.

Here's how the best Web3 teams do it.

Why Web3 Onboarding Is Different

Before diving into the playbook, it's worth understanding why generic onboarding fails in Web3. Several factors make the onboarding challenge fundamentally different from traditional tech:

Remote-first by default. As noted in our State of Web3 Hiring 2026 overview, 72% of Web3 roles are fully remote. There's no office tour, no desk setup, no hallway introductions. Every aspect of onboarding must be designed for asynchronous, distributed teams spanning multiple time zones.

Security is existential. In traditional tech, a security mistake might leak user data. In Web3, a security mistake can drain a protocol of hundreds of millions of dollars in minutes. New hires need to internalize security practices before they write a single line of production code.

Token-based compensation requires education. Your new hire may be receiving part of their compensation in tokens for the first time. They need to understand vesting schedules, tax implications, wallet security, and how to manage this asset class — and they need this information immediately, not six months in.

Protocol-specific knowledge has no external training. There's no course that teaches your specific protocol's architecture, governance model, and codebase conventions. All of this knowledge lives inside your team and must be transferred deliberately.

The tooling stack is non-standard. Discord for communication, Notion or HackMD for documentation, Linear or GitHub Projects for task management, Gnosis Safe for treasury operations, custom dashboards for protocol metrics. Many of these tools are unfamiliar to hires coming from traditional tech.

According to our employer survey data, Web3 companies that invest in structured onboarding programs see 40% higher 12-month retention rates than those that rely on ad-hoc "figure it out" approaches. The upfront investment in onboarding pays for itself within the first year.

First-Week Essentials

The first week sets the tone for the entire employment relationship. Here's what needs to happen, in order of priority.

Day 1: Access, Identity, and Orientation

Administrative setup:

  • Employment documents signed and filed
  • Payment details confirmed (stablecoin wallet address for crypto payments, bank details for fiat components)
  • Benefits enrollment initiated
  • Hardware shipped (if not already) — laptop, hardware wallet (Ledger or Trezor), YubiKey for 2FA

Identity and access:

  • Company email and communication accounts created
  • Discord server access with appropriate role tags
  • GitHub organization membership with correct team assignments
  • Notion/documentation workspace access
  • Calendar invitations for all recurring team ceremonies

Orientation session (60-90 minutes, live):

  • Welcome from the hiring manager or team lead
  • Overview of the team structure, who does what, and how teams interact
  • Introduction to the onboarding buddy (more on this below)
  • Walkthrough of the first-week schedule and expectations
  • Quick tour of the communication norms — when to use Discord vs. async docs vs. direct messages

Days 2-3: Security Training

This is non-negotiable and must happen before the new hire gains access to any production systems, multisig wallets, or sensitive codebases.

Personal security setup:

  • Hardware wallet initialization and seed phrase management (never store seed phrases digitally, use metal backup plates)
  • Password manager setup (1Password or Bitwarden) with company vault access
  • 2FA enabled on all accounts using hardware keys (YubiKey preferred over TOTP apps)
  • VPN configuration if required
  • Phishing awareness training specific to crypto (fake MetaMask popups, Discord DM scams, fake airdrop links)

Operational security protocols:

  • Multisig wallet procedures — how transactions are proposed, reviewed, and approved
  • Key management policies — which keys are stored where, rotation schedules, emergency procedures
  • Incident response — what to do if you suspect a compromised key, a phishing attempt, or a protocol vulnerability
  • Code review security checklist — what to look for before approving any PR that touches smart contracts

Do not skip or defer security training. The cost of a security incident caused by an untrained team member is orders of magnitude greater than the cost of two days of onboarding time. Every major protocol hack post-mortem includes the same lesson: human error and insufficient operational security training were contributing factors.

Days 3-5: Tooling Stack Deep-Dive

Walk the new hire through your complete tooling ecosystem. Don't just grant access — explain how each tool is used, where information lives, and what the team's conventions are.

Common Web3 company tooling stack:

CategoryCommon ToolsWhat to Cover
CommunicationDiscord, Telegram, Google MeetChannel structure, when to use which channel, meeting norms
DocumentationNotion, HackMD, GitBookWhere docs live, how to contribute, what's authoritative vs. draft
Project ManagementLinear, GitHub Projects, DeworkWorkflow conventions, sprint/cycle structure, how to pick up tasks
DevelopmentFoundry, Hardhat, VS Code, GitHubRepo structure, branching strategy, CI/CD pipeline, deploy procedures
MonitoringTenderly, Forta, custom dashboardsWhat's monitored, alert thresholds, on-call procedures
Treasury/OpsGnosis Safe, Coinshift, UtopiaHow treasury operations work, approval flows, spending authorities
AnalyticsDune, The Graph, NansenWhere protocol metrics live, key dashboards to bookmark

End of Week 1: First-Week Retrospective

A 30-minute 1:1 between the new hire and their manager to check in on:

  • What's clear and what's confusing
  • Any access or tooling issues
  • Initial impressions and questions
  • Adjustments needed to the onboarding plan

The 30-60-90 Day Framework

Structure beats ambiguity. The best Web3 teams provide new hires with explicit expectations for their first three months, broken down by role type.

For Engineering Roles

Days 1-30: Learn and Ship Small

  • Complete security training and tooling setup
  • Read the entire protocol documentation end-to-end
  • Review the smart contract architecture — read every core contract, understand the inheritance structure, state variables, and key functions
  • Set up the local development environment and run the full test suite
  • Complete 2-3 small, well-scoped tasks (bug fixes, test additions, documentation improvements)
  • Attend all team ceremonies and start participating in code reviews
  • Deploy a contract to the team's testnet environment

Goal: The new hire can navigate the codebase independently, run tests, and submit PRs that pass review without major revisions.

Days 31-60: Contribute Meaningfully

  • Own and deliver a medium-scoped feature or improvement
  • Participate actively in code reviews — both giving and receiving feedback
  • Begin participating in architecture discussions and protocol design conversations
  • Start contributing to on-call rotation (shadowing first, then primary)
  • Deepen understanding of the protocol's economic model and governance structure

Goal: The new hire is contributing at a pace comparable to existing mid-level team members. They can take a well-defined task from design to deployed and tested code.

Days 61-90: Operate Independently

  • Own a significant feature or system end-to-end
  • Proactively identify and propose improvements to the codebase, testing, or processes
  • Mentor or assist newer contributors
  • Contribute to protocol governance discussions or improvement proposals
  • Present a technical deep-dive to the team on something they've learned

Goal: The new hire is fully ramped and operating at the level expected for their seniority. They're a net positive contributor to the team.

For Product and Non-Engineering Roles

Days 1-30: Immerse

  • Use the protocol's products extensively as a real user (swap, stake, lend, vote — whatever the core actions are)
  • Study competitor protocols and understand the competitive landscape
  • Read all existing product documentation, roadmaps, and user research
  • Attend community calls and governance discussions
  • Complete 1:1 meetings with every team lead and key stakeholders

Days 31-60: Contribute

  • Own a defined workstream (feature spec, user research project, community initiative)
  • Begin making product recommendations backed by data and user feedback
  • Establish regular communication cadence with engineering counterparts
  • Start contributing to governance proposals or protocol improvement discussions

Days 61-90: Drive

  • Lead a product initiative from conception through delivery
  • Present strategic recommendations to leadership
  • Build cross-functional relationships that enable independent execution
  • Establish yourself as the go-to person for your domain within the team

Write down the 30-60-90 plan before the new hire's start date, share it on day one, and review progress at each milestone. The act of documenting expectations forces clarity and gives the new hire a concrete roadmap instead of the anxiety-inducing "figure out how to be useful" approach that plagues many small teams.

Knowledge Transfer for Protocol-Specific Codebases

Every protocol has unique architecture, conventions, and accumulated design decisions that aren't documented anywhere public. Transferring this knowledge effectively is one of the hardest parts of Web3 onboarding.

The Architecture Document

Every protocol should maintain a living architecture document that covers:

  • System overview — High-level diagram of how contracts interact with each other and with external systems (oracles, bridges, governance)
  • Contract-by-contract breakdown — What each core contract does, its key state variables, and its role in the system
  • Design decisions and tradeoffs — Why specific patterns were chosen over alternatives. This is the most valuable and most commonly missing section
  • Upgrade history — Major changes, what motivated them, and any backward-compatibility considerations
  • Known limitations — Technical debt, known issues, and planned improvements

If this document doesn't exist, creating it is an excellent onboarding task for the new hire — they'll learn the codebase deeply while producing something valuable for future hires.

Code Walkthroughs

Schedule dedicated sessions where a senior engineer walks through the codebase with the new hire:

  • Session 1 (90 min): High-level architecture — how contracts compose, the deployment setup, how upgrades work
  • Session 2 (90 min): Core business logic — the main protocol mechanics (lending logic, AMM math, staking rewards calculation)
  • Session 3 (60 min): Security considerations — known attack vectors, defensive patterns, invariants that must be maintained
  • Session 4 (60 min): Testing and deployment — the test suite structure, how to write effective fuzz tests, the deploy pipeline

Record these sessions. They become reusable onboarding material for every future hire.

The Reading List

Curate a protocol-specific reading list:

  • The original whitepaper or protocol specification
  • Key governance proposals that shaped the protocol's direction
  • Post-mortem reports for any past incidents
  • Audit reports from external security firms
  • Relevant EIPs (Ethereum Improvement Proposals) that the protocol implements or depends on
  • Technical blog posts from the team explaining design decisions

Security Hygiene Training

Security training at onboarding is just the beginning. The best protocols build ongoing security practices into their culture.

Security Practices to Instill

For all team members:

  • Never click links in Discord DMs — this is the most common attack vector in Web3
  • Verify URLs manually before connecting wallets
  • Use separate browser profiles for work and personal browsing
  • Report any suspicious messages or requests immediately, even if you're not sure
  • Never share screen while a wallet or private key is visible

For engineers:

  • Every smart contract PR must be reviewed by at least two engineers, with one specifically checking for security issues
  • Use static analysis tools (Slither, Mythril) as part of the CI pipeline
  • Write invariant tests and fuzz tests for all critical functions
  • Follow the checks-effects-interactions pattern consistently
  • Document security assumptions in NatSpec comments

For team members with multisig access:

  • Verify transaction details on the hardware wallet display, not just the computer screen
  • Never approve a transaction you didn't initiate or expect
  • Use a dedicated device for multisig operations when possible
  • Establish out-of-band confirmation procedures for high-value transactions (phone call or video to verify intent)

The most effective security training is scenario-based. Run periodic tabletop exercises: "You receive a Discord DM from someone impersonating the CTO asking you to approve an urgent multisig transaction. What do you do?" These exercises build muscle memory that policies alone cannot.

Culture Integration in Remote Teams

Remote onboarding makes culture integration harder but not impossible. The teams that do this well are intentional about creating connection points.

Structured Social Touchpoints

  • Virtual coffee chats — Pair the new hire with a different team member each week for a 30-minute non-work conversation. Continue for the first 8 weeks
  • Team-wide introductions — Have the new hire write a brief introduction post in your team channel. Encourage the team to respond with genuine welcome messages, not just emoji reactions
  • Onboarding buddy — Assign a specific team member (not the manager) as the go-to person for questions, context, and informal guidance. The buddy should check in proactively, not wait to be asked

Communication Norms

Remote Web3 teams need explicit communication norms, and new hires need to learn them quickly:

  • Default to async — Write it in a shared channel before scheduling a call. Use threads to keep discussions organized
  • Over-communicate status — In a remote team, silence is ambiguous. Regular updates in project channels keep everyone aligned without requiring meetings
  • Camera-on for key meetings — Establish clear expectations about when cameras should be on (team syncs, 1:1s) vs. optional (large all-hands, presentations)
  • Time zone respect — Document team members' working hours. Don't expect instant responses outside someone's core hours

Values Alignment

Web3 teams often have strong ideological underpinnings — decentralization, open source, user sovereignty, financial inclusion. These values should be part of onboarding, not assumed:

  • Discuss the protocol's mission and values explicitly during the first week
  • Share the governance framework and how decisions are made
  • Explain the open-source philosophy and what it means in practice (public repos, community contributions, transparent development)
  • Set expectations about community engagement — are team members expected to be active in Discord? Participate in governance? Attend community calls?

Mentorship Programs

The best Web3 teams pair onboarding with ongoing mentorship that extends well beyond the first 90 days.

Effective Mentorship Structure

  • Onboarding buddy (weeks 1-8): Tactical, day-to-day support. "How do I set up my local environment?" "Which channel do I ask about this?"
  • Technical mentor (months 1-6): A senior engineer who provides architectural guidance, code review feedback, and technical career development. Meet weekly for 30-45 minutes
  • Career sponsor (ongoing): A senior leader who advocates for the new hire's growth, connects them with opportunities, and provides strategic career guidance

The mentorship structure should be documented and the mentor explicitly assigned — don't rely on organic relationships forming on their own, especially in remote teams where casual interaction doesn't happen naturally.

Common Onboarding Failures

Based on feedback from new hires across dozens of Web3 companies, these are the most frequent ways onboarding goes wrong.

1. No Documentation

The new hire arrives and there's no architecture document, no onboarding checklist, no written explanation of how the codebase works. They're told to "read the code" and "ask questions in Discord." This wastes the new hire's time and senior engineers' time, and communicates that the company doesn't value preparation.

2. Security Training as an Afterthought

Granting multisig access or production deployment permissions before security training is complete. This happens more than it should, usually under pressure to "get the new person productive fast." The risk vastly outweighs the time saved.

3. No Defined First Tasks

The new hire finishes setup and asks "what should I work on?" and nobody has a clear answer. This signals disorganization and makes the new hire feel like they weren't expected. Have 3-5 well-scoped starter tasks ready before day one.

4. Isolation

No buddy, no scheduled social interactions, no 1:1s beyond the direct manager. The new hire feels like a freelancer, not a team member. In remote teams, connection must be actively created.

5. Sink or Swim

Expecting the new hire to be fully productive in two weeks with no structured ramp-up. This is especially damaging for senior hires, who may feel pressure to perform immediately and skip important learning steps.

6. Ignoring the Token Compensation Education

The new hire doesn't understand their vesting schedule, doesn't know how to set up their wallet for token receipt, and has no idea about the tax implications of their token compensation. This creates anxiety and erodes trust.

As discussed in our employer's guide to Web3 hiring, the investment you make in onboarding directly impacts retention. And understanding the red flags that new hires watch for during their first weeks can help you avoid the practices that drive early attrition.

The Onboarding Checklist

Here's a comprehensive checklist for Web3 onboarding, organized by timeframe:

Before Day 1

  • Hardware shipped (laptop, hardware wallet, YubiKey)
  • Accounts created (email, Discord, GitHub, Notion)
  • Onboarding buddy assigned
  • First-week schedule blocked on calendar
  • 3-5 starter tasks identified and documented
  • 30-60-90 day plan written

Week 1

  • Administrative and employment setup complete
  • Security training completed
  • Tooling stack walkthrough completed
  • All team introductions made
  • Local development environment running
  • First-week retrospective conducted

Month 1

  • Architecture walkthroughs completed
  • Protocol documentation read end-to-end
  • First PR merged
  • Reading list completed
  • Regular 1:1 cadence established with manager and mentor

Month 2-3

  • Contributing at expected pace for role level
  • Participating in code reviews and architecture discussions
  • Integrated into team culture and communication patterns
  • 90-day review completed with clear feedback and forward plan

Conclusion

Onboarding in Web3 is harder than in traditional tech because the stakes are higher, the environment is more distributed, and the knowledge required is more specialized. But the companies that get it right gain an enormous competitive advantage: their new hires ramp faster, stay longer, and contribute more deeply than those at companies that wing it.

The investment required is real — documented architecture, prepared starter tasks, security training programs, buddy assignments, and structured 30-60-90 plans all take time to build. But in a market where senior Web3 engineers take 45-60 days to hire and cost $300k-$500k+ in total compensation, losing a new hire to poor onboarding in their first 90 days is one of the most expensive mistakes a Web3 company can make.

Build the onboarding system once. Improve it with every new hire. Your retention numbers — and your team's output — will reflect the investment.

Explore open roles at companies that take onboarding seriously on gm.careers.

Share:TwitterLinkedIn

Stay Updated

Weekly Web3 jobs and career insights.