Guarding Against Protocol Subversion at Coinbase
summary
Coinbase describes concrete defenses: real-time blockchain parsers that detect hash changes and reorgs, alerting when depths exceed confirmation policies. Monitoring catches reorg of 74 blocks on etherium classic that orphaned 57 blocks and led to >$1.1M stolen (attacker cost estimated $50k–$250k), and it flags ERC‑20 proxy admin probes such as failed attempts on USDC and a KICK compromise that allowed mint/destroy. When detected the platform pauses interaction with the chain and uses rule-based monitors to scale coverage.
AI-written summary · about
chapters (7)
- 0:00Introduction and speaker intro
- 1:09What is protocol subversion
- 7:0851% double spend attacks explained
- 12:10Real-world 51% attack on Ethereum Classic
- 18:12ERC-20 smart contract risks
- 23:28Admin privilege takeover on USDC
- 25:34Summary and Q&A
related talks
46mSecuring Coinbase’s Edge Payments Infrastructure
01h 01mRegulation through Governance
18mNot Quite Water Under the Bridge
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
12mSmart Contract Security
22mAlpha for Auditors: The Vulnerabilities of Tomorrow
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
46mThe State of Blockchain Security - 2023 Edition
