Illuminating the Shadows of Web3 Hacks
Public Key
White Hat Hacking and Bug Bounties in Crypto
Exploring the ethical dilemmas surrounding white hat hacking and bug bounties in the crypto space, including the debate on rewarding researchers, recent cases of exploitation, and the role of law enforcement in deterring malicious activities.
“We also should not pretend that law enforcement is going to solve the problem. It only helps, but it doesn't completely solve the problem. There will always be attackers outside the reach of the law” - Brian Pak
Web3 was starting to look like the wild west, with smart contract compromises and sophisticated attacks by hackers, but with law enforcement paying serious attention and builders like our guest, Brian Pak, Co-founder and CEO of ChainLight, the industry is starting to shine the light on these illicit actors and combat web3 and Defi hacks.
Ian Andrews (CMO, Chainalysis) sits down with Brian to discuss the early days of ChainLight, from discovering early Ethereum bugs to creating innovative security solutions like Digital Asset Risk Tracker (DART) and the Relic Protocol.
The duo explore major web3 and DeFi exploits, white hat hacking ethics, and South Korean crypto politics. Brian shares how the newly created crypto threat-sharing center (SEAL) is striving to enhance the safety and transparency of the Web3 ecosystem and the emergence of law enforcement engagement.
2 | Brian’s journey into crypto and discovering Ethereum bugs in the early days
5 | Smart contract code audits and continuing to learn about new web3 attack vectors
8 | Identifying new and old attack vectors like price oracle manipulation and bridge vulnerabilities
10 | What is the Digital Asset Risk Tracker (DART) and how it identifies illicit trends in memecoin projects
14 | ChainLight introduces Relic Protocol which let smart contracts access historical data without intermediaries
20 | The crypto regulatory framework in South Korea and the impact it has on Singapore
24 | How white hat hackers have been given a bad name in crypto
28 | Building interoperability and discussions around Chainlink’s Cross-Chain Interoperability Protocol (CCIP)
31 | Introducing LUMOS and how Chainlight is illuminating the Shadows of Web3 Hacks
33 | Chainlink joins white hat hacker group SEAL to create crypto threat-sharing center
Related resources
Check out more resources provided by Chainalysis that perfectly complement this episode of the Public Key.
- Website: ChainLight: Thrive Without Fear
- Website: LUMOS (powered by Chainlight): Illuminating the Shadows of Web3 Hacks
- Article: Cointelegraph: White hat hacker group SEAL launches crypto threat-sharing center
- Blog: Are Real-World Assets (RWA) Projects Really Safe?
- Article: Ticking Bombs on Interoperability Protocols
- Podcast: Ep. 79: Web3 Adoption in Traditional Finance (with Kemal El Moujahid, Chainlink)
- Event: TraceDC (July 16-17) The leading public sector event of the cryptocurrency ecosystem
- Blog: Public Sector Survey Preview: The 2024 State of Cryptocurrency Investigations Report
- YouTube: Chainalysis YouTube page
- Twitter: Chainalysis Twitter: Building trust in blockchain
- Tik Tok: Building trust in #blockchains among people, businesses, and governments.
- Telegram: Chainalysis on Telegram
- Ian Andrews * Host * (Chief Marketing Officer, Chainalysis)
- Brian Pak (Co-founder and CEO, ChainLight)
This website may contain links to third-party sites that are not under the control of Chainalysis, Inc. or its affiliates (collectively “Chainalysis”). Access to such information does not imply association with, endorsement of, approval of, or recommendation by Chainalysis of the site or its operators, and Chainalysis is not responsible for the products, services, or other content hosted therein.
Our podcasts are for informational purposes only, and are not intended to provide legal, tax, financial, or investment advice. Listeners should consult their own advisors before making these types of decisions. Chainalysis has no responsibility or liability for any decision made or any other acts or omissions in connection with your use of this material.
Chainalysis does not guarantee or warrant the accuracy, completeness, timeliness, suitability or validity of the information in any particular podcast and will not be responsible for any claim attributable to errors, omissions, or other inaccuracies of any part of such material.
Unless stated otherwise, reference to any specific product or entity does not constitute an endorsement or recommendation by Chainalysis. The views expressed by guests are their own and their appearance on the program does not imply an endorsement of them or any entity they represent. Views and opinions expressed by Chainalysis employees are those of the employees
The AI-powered Podcast Player
