The Lunacy of Web3
summary
Web3 is shown as a security minefield: billions disappear in theft and fraud with concrete examples—FTX fraud, Binance and Ronin breaches (~$500M and ~$600M), and bridge hacks like Wormhole bridge $360M. Attacks exploit client-side code and file hosting so NFTs can be swapped out (Moxie Marlinspike demos), plus client-side JavaScript reprogramming and account hijacks in Fortnite/Pokemon Go. Virtual worlds download local code, have no expectation of privacy, require heavy moderation, supply‑chain checks, red‑teaming and strict contracts to reduce risk.
AI-written summary · about
chapters (17)
- 0:00RSAConference 2023
- 4:01What is Web3 and Metaverse?
- 10:38Broad Characteristics
- 11:31Benefits
- 15:10Digital Currency Flaws
- 17:25Identity
- 18:25Client Vulnerabilities
- 20:38Owned by the App Owner
- 22:31Distractions
- 23:09User to User Communications
- 23:59Data Accuracy
- 24:27Privacy Invasion
- 25:23Complete Reliance on Metaverse Owner
- 26:36"Physical" Control of Your Dominion
- 29:18Avatar Interactions
- 33:00Hacking the Access Points
- 35:17Cryptocurrency
related talks
36mDeciphering Web3 Security: Implications and Innovations
31mCybersecurity in Web3
17mWeb3: The Next Internet or Just Hype?
52mThe Ethics of Web3
24mBitcoin Web Application Security
23mWeb 3 Gaming: What it is and Why it Matters
19mRansomware, Data Breaches & Cyberattacks: The Cyber War For Your Data
37mOutta Luck: Security Lessons from Crypto Forums