The State of DeFi Security - 2024
summary
Year-over-year shifts show $450M from private key theft dominating losses while malicious insiders steal $95M across 17 incidents and price-oracle and reward-manipulation losses drop by ~4x and ~10x respectively; users lose $461M to transaction drainers. Attribution points to nation-state groups (Lazarus/Trader) responsible for large, organized heists and roughly a third of ops-losses. Concrete defenses that matter: deploy multi-sig with time locks and guardians, harden cloud/infra and KMS, add logging/monitoring and practiced incident response, isolate signing on dedicated machines, and treat personnel and social engineering as primary attack surfaces.
AI-written summary · about
chapters (14)
- 0:00Welcome
- 1:08DeFi security trends 2024
- 2:11Threat landscape update
- 3:14Price oracle hacks
- 4:58Operational security issues
- 6:45Threat actors motivations
- 8:10Insider threats
- 11:45Criminal APT methods
- 14:13Lazarus Group attacks
- 17:24Nation state attack scale
- 20:33Defending against adversaries
- 21:58Security program building
- 23:22Industry progress next steps
- 24:16Q&A
related talks
46mThe State of Blockchain Security - 2023 Edition
23mWhere are Your Keys
36mDeciphering Web3 Security: Implications and Innovations
40mBlockchain Security Guarantees and Exploits
37mOutta Luck: Security Lessons from Crypto Forums
19mRansomware, Data Breaches & Cyberattacks: The Cyber War For Your Data
30mNFT Scams & Best Security Practices
09mDigital Asset Security, Reinvented