Breaching Ethereum's Privacy and Exploiting DEXs Using a Simple Cloud Vulnerability

July 8, 2024

12:00 pm

-

12:30 pm

Get Tickets Now

Breaching Ethereum's Privacy and Exploiting DEXs Using a Simple Cloud Vulnerability

WHEN

July 8, 2024 12:00 PM

ABOUT

Blockchain security often focuses on smart contracts and cryptography attacks, neglecting the security of other critical components like cloud infrastructures, web applications, and API gateways. Our research uncovers vulnerabilities at the Web2-Web3 intersection, revealing how simple cloud exploits breached the privacy of major blockchains like ZetaChain by linking wallets to real-world IPs. We expanded this vulnerability to Ethereum and developed a new MEV attack, causing economic damage to DEXs. This talk highlights these exploits and the overlooked Web2 security issues in Web3 designs.

Get Ticket NOW

Other Speakers

Elad Ernst

Security Research Lead at dWallet Labs

Other agenda

Revolutionizing Solidity Debugging with Symbolic Execution

At Runtime Verification, we saw a need for advanced Solidity debugging tools combining traditional breakpoint debugging with symbolic execution. Enter "Simbolik: The Symbolic Solidity Debugger." This tool bridges the gap between user-friendly debugging and powerful formal methods. Developers start with familiar techniques, like setting breakpoints, and gradually integrate formal methods, enhancing the security and reliability of their smart contracts.

View Details

Finding Vulnerabilities by Querying Smart Contracts for Bug Patterns With Glider

Experience of utilizing a query engine to find replicates of known bugs in any deployed smart contracts within the Ethereum ecosystem.

View Details

The Role of Invariant Monitoring in The Security Stack

An overview of core capabilities—Invariant Monitoring Engine, Real-Time Threat Monitoring & Detection, and Threat Remediation & Incident Response.

View Details

Validators Security Panel

This panel will delve into the intricacies of validator security within blockchain networks. The experts will discuss the latest threats, mitigation strategies, and best practices to ensure the robustness and reliability of validator nodes. Attendees will gain valuable insights into the operational security, cryptographic safeguards, and policy measures essential for maintaining a secure validator ecosystem.

View Details