Скачать или смотреть Web3 wallets & Last Line of Defence

In this interview, Aneirin shares his perspectives on what Web3 ecncompases, and the cyberthreats that ordinary public faces in the Web3 world.

Referencing phishing as one of the key threats, he notes exploiting human emotional vulnerabilities remains a classic attack vector for phishing in Web3. However, an additional challenge in the Web3 world is that transaction approval in Web3 is confusing as the user interface and messages are not always clear.

He also shares that the Web3 threat landscape remains elevated, and that losses in the recent week amounts to USD50mil, as well as a recent compromise of Vitalik Buterin's Twitter Account to conduct a phishing campaign, leading to close to $700k losses for the users.

Aneirin also shares a “last line of defence” solution to prevent theft of funds via malicious transaction. This is where pending transactions in the mempool are monitored to detect if any breach pre-set conditions, and is so, the flagged transaction is "front run" - that is, assets are moved to safety.

He also shares that some examples of these conditions (or signals) are predefined time intervals for transaction activity, or modus operandi of malicious transaction behaviour.
---------
Recorded 13th September 2023, 8.30am, Singapore F1 Week, Marina Bay Sands.
---------
00:46 – What is Web3?
01:14 – Two tenets of Web3 (a) decentralization (b) digital ownership
02:08 – What are some cyberthreats in Web3?
02:35 - One example: Hacker stole over $690,000 after hijacking Vitalik Buterin's Twitter Account
03:14 - Approving transactions in Web3 is confusing as the user interface and messages are not always clear.
03:31 - Any difference in phishing between the Web3 and traditional internet worlds?
04:12 - Exploiting human emotional vulnerabilities remains a classic attack vector for phishing in Web3
05:09 - Platform builders should prioritize the safety of their users
06:00 - How does the cyberthreat landscape look for Web3 in 2023 so far?
06:22 - Threats are not slowing down, for example, losses tracked this week amounts to USD50 million
06:46 – What are some mitigation measures?
07:18 - One approach is to monitor “pre-chain" activity (or pending transactions)
07:29 - and detect if the transaction behaviour breach pre-set conditions
07:39 - If flagged, transaction is "front run" - that is, assets are moved to safety
08:30 - Last line of defence to prevent theft of funds via malicious transaction
09:17 - Signals to indicate malicious transactions, for example, predefined time intervals for transaction activity
10:18 - Other indicators are modus operandi of malicious transaction behaviour
---------
Aneirin Flynn (General Manager, Eleos Labs) is a venture builder and business leader harnessing new technologies to deliver breakthrough impact and new user experiences. He has led go-to-market, special projects, and brand activation campaigns for high-profile organisations including TikTok, Revolut, NCS, OCBC, and Singapore's Tourism Board – spanning technology, games, events, and media.

Currently committed to the development and growth of Web3, Aneirin is a founding team member of Ethlas (Sequoia-backed Web3 gaming platform) and Eleos Labs (the world's first self-custody wallet security system).
---------
Stay with us:
LinkedIn ➡️   / lojane  
YouTube ➡️ https://cutt.ly/U2B0yVi

#Web3
#Cybersecurity
#Phishing
#crytpo