Join the CEO of Immunefi as he shares the journey to achieving $200 million in whitehat rewards. Discover how Immunefi revolutionized Web3 security by incentivizing ethical hackers to find and report vulnerabilities. This talk will cover key strategies, challenges, and milestones, highlighting the critical role of whitehat hackers in protecting blockchain projects. Learn about the evolution of bug bounty programs and the future of cybersecurity incentives in the decentralized world.

View Details

An overview of core capabilities—Invariant Monitoring Engine, Real-Time Threat Monitoring & Detection, and Threat Remediation & Incident Response.

View Details

"Smart contract development involves using a variety of tools for testing, analysis, deployment, or vulnerability scanning. The approach of the Wake framework is to deliver one tool the developers and auditors can use for everything: testing framework, fuzz testing, a static analyzer with custom detectors and printers, all visualized in the frontend - VS Code extension. This talk presents advanced use-cases focused on security and auditing such as fuzz testing, differential fuzz testing, and fork testing."

View Details

Blockchain security often focuses on smart contracts and cryptography attacks, neglecting the security of other critical components like cloud infrastructures, web applications, and API gateways. Our research uncovers vulnerabilities at the Web2-Web3 intersection, revealing how simple cloud exploits breached the privacy of major blockchains like ZetaChain by linking wallets to real-world IPs. We expanded this vulnerability to Ethereum and developed a new MEV attack, causing economic damage to DEXs. This talk highlights these exploits and the overlooked Web2 security issues in Web3 designs.

View Details

This panel will delve into the intricacies of validator security within blockchain networks. The experts will discuss the latest threats, mitigation strategies, and best practices to ensure the robustness and reliability of validator nodes. Attendees will gain valuable insights into the operational security, cryptographic safeguards, and policy measures essential for maintaining a secure validator ecosystem.

View Details

Bridge exploits rank prominently among the most prevalent hacks in the industry (over $337M were lost in 2023 alone). This presentation will delve into the intricacies of bridge security pitfalls, highlighting common mistakes unearthed during bridge audits, and offering practical strategies for mitigating risks.

View Details

At Runtime Verification, we saw a need for advanced Solidity debugging tools combining traditional breakpoint debugging with symbolic execution. Enter "Simbolik: The Symbolic Solidity Debugger." This tool bridges the gap between user-friendly debugging and powerful formal methods. Developers start with familiar techniques, like setting breakpoints, and gradually integrate formal methods, enhancing the security and reliability of their smart contracts.

View Details

Threshold cryptography, crucial for blockchain and cryptocurrencies, faces a critical issue: threshold key destruction. This talk will cover how attackers can prevent honest participants from using threshold keys, focusing on three cases: the severe impact of the Forget-and-Forgive attack (BHUSA '20), the risks of missing length checks in Feldman VSS, and the novel method in DKLs23 that exploits honest participants.

View Details

Join us for an insightful discussion on the critical role of formal verification in securing smart contracts. This panel brings together experts to explore how mathematical proofs can ensure the correctness and security of smart contracts, preventing vulnerabilities before deployment. Discover key techniques, real-world case studies, and future directions in formal verification for blockchain security. Enhance your understanding of how to fortify smart contracts in a decentralized environment.

View Details

Rounding-related hacks are having a moment in the spotlight. Yet, they're one of the most misunderstood class of vulnerabilities. In this talk, we explore the history of rounding related exploits, diagnose root causes, and provide practical mitigations for protocols.

View Details

Web3 wallets are crucial for digital assets and data protection. As blockchain adoption grows, so do threats. Our panel explores security challenges and solutions, including phishing attacks, key management, and software exploits. Experts will discuss advancements in multi-signature and hardware wallets, plus emerging security protocols. Learn best practices to safeguard your digital wealth and enhance trust in the decentralized ecosystem. Join us for a vital discussion on fortifying Web3 wallet security.

View Details

Experience of utilizing a query engine to find replicates of known bugs in any deployed smart contracts within the Ethereum ecosystem.

View Details