What we can learn from the World's Biggest Heists
summary
Three recent heists trace a clear pattern: the Ronin bridge where Ronin bridge validators (9 total, 5 to sign) are weakened because Sky Mavis controls four nodes, letting Lazarus siphon about 625 million USD of ETH/USDC; laundering funnels through Tornado Cash DAO and triggers US sanctions and arrests of founders; a Louvre jewelry theft exploits default creds and Windows XP cameras to steal rare pieces; and a Bybit compromise uses a SafePal/Supply‑chain backdoor plus a Windows LNK exploit to trick approvers with Ledger‑style devices and steal roughly 1.5 billion USD.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 8:33Why study heists
- 11:23Lazarus Group crypto heists
- 13:29Axie Infinity Ronin hack
- 19:05Axie Infinity hack details
- 28:11Louvre robbery failures
- 32:24Floor numbering errors
- 34:53Louvre security before heist
- 36:38Bybit supply chain hack
- 41:09LNK file malware
- 43:13Bybit hack execution
- 50:33Missed opportunities
- 51:35Lessons from attacks
- 53:43Biggest cybersecurity problem
- 54:45Cybersecurity storytelling
- 55:48Top five lessons
related talks
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud
46mThe State of Blockchain Security - 2023 Edition
40mBlockchain Security Guarantees and Exploits
19mSecuring a Cross-Chain Bridge
27mThe State of DeFi Security - 2024
09mHow to Find Attackers and Improve Your Security Posture
40mThe Lunacy of Web3
51mModern Bank Heists