The challenges of building, scaling and securing DeFi protocols
summary
Panel documents concrete practices and failures: Aave discovers an LLVM compiler bug during a zkSync deployment that breaks collateral math; Uniswap ships V4 with transient storage and a hooks metadata plan; Moro moves from optimizers to an immutable lending primitive and hits ~$2 billion TVL on optimizers; Oiler runs a $5 million live CTF, endures 472 Cantina reports, logs ~700 audit-days, recovers stolen funds and rebuilds a hardened V2 with layered monitoring and supply-cap unwinds.
AI-written summary · about
chapters (17)
- 0:00DeFi protocol challenges
- 1:05Panelist backgrounds
- 2:54Building Moro protocol
- 4:22Oiler Labs journey
- 5:48Uniswap V4 work
- 6:53Uniswap team practices
- 9:01Oiler security reviews
- 11:12Moro minimalist design
- 13:22Aave protocol upgrades
- 15:07Aave LLVM bug
- 18:40Moro lending shift
- 22:58Oiler V2 security
- 28:12Uniswap V4 upgrade
- 31:26Q&A on Uniswap V4 hooks
- 34:36Security feedback
- 37:05Protocol team concerns
- 38:29Closing remarks
related talks
01h 33mWhite Hat Panel: DeFi Exploits
18mFavorite DeFi Vulnerabilities
16mDiscussion - Security 2, Session 9
04mRecap Video
51mA Deal with the Devil: Breaking Smart Contracts
41mSecurely Scaling Decentralized Governance
26mIntroduction to Speedrun Ethereum Challenges
21mThe Credit Layer Vaults, Lending Markets, and the Next Phase of DeFi