{"id":162858,"date":"2023-09-26T10:25:36","date_gmt":"2023-09-26T04:55:36","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=162858"},"modified":"2023-09-26T10:25:36","modified_gmt":"2023-09-26T04:55:36","slug":"defi-hacks-usually-come-down-to-poor-security-halborn-coo-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/defi-hacks-usually-come-down-to-poor-security-halborn-coo-crypto-news\/","title":{"rendered":"DeFi Hacks Usually Come Down to Poor Security: Halborn COO – Crypto News"},"content":{"rendered":"
\n

The tech industry has had its eyes fixed on artificial intelligence, and cybersecurity professionals are lining up to find vulnerabilities<\/a> and patch security holes in AI platforms like OpenAI’s ChatGPT. But blockchain cybersecurity firm Halborn<\/a> has kept its eyes on the ball, continuing to look for ways to support and secure Web3 projects.<\/p>\n

\u201cI think as the ecosystem starts to mature, we’ll start to see a slowdown of some of the dumb mistakes that a lot of projects are making, a lot of organizations are making,\u201d Halborn COO David Schwed told Decrypt<\/i> at Messari Mainnet. \u201cThis is a controversial statement, but many hacks are preventable.\u201d<\/p>\n

Schwed pointed to a report<\/a> by the blockchain security firm that said over $5 billion had been lost in DeFi hacks between 2016 and 2022.<\/p>\n

\u201cA number of the hacks were not necessarily on-chain vulnerabilities,\u201d Schwed said. \u201cThey were standard Web2 security that was just compromised or breached due to poor security practices.\u201d<\/p>\n

While Schwed pointed to a lack of cybersecurity<\/a> deficiencies in some projects, he also recognized that certain breaches, like zero-day attacks stemming from vulnerable technology, are inevitable. However, he emphasized the need for companies to be prepared.<\/p>\n

In cyber security, a zero-day<\/a> (vulnerability, exploit, or attack) refers to a software vulnerability unknown to those responsible for patching or fixing the software. The zero refers to the amount of time developers had to address to address and patch the vulnerability.<\/p>\n

\u201cIf you’re relying on a piece of technology, and there’s a vulnerability in that technology that’s a zero-day, I would not fault that organization,\u201d Schwed said. \u201cWhat I would fault them for potentially is looking for detective-type controls.\u201d Detective controls<\/a> are designed to find errors or problems after the transaction has occurred.<\/p>\n

\u201cSo if you start to see anomalies in a smart contract, or anomalies behavior on-chain, that’s when you should have a strong incident response<\/a> program, or have the ability to issue circuit breakers within a contract or being able to sweep the funds into a potentially non-effected wallet.\u201d<\/p>\n

Zero-day attacks are only one of the potential threats DeFi projects face. Last week, the decentralized cryptocurrency exchange Balancer<\/a> was hit by a denial-of-service (DNS) attack that led to the theft of over $250,000 in funds.<\/p>\n

Since their inception, blockchains have been lauded for their decentralization, with many proponents saying hacking blockchains like Bitcoin and Ethereum is impossible because these chains are decentralized. But while blockchain tech may be decentralized, Schwed said the dapps built on top of them are not.<\/p>\n

\u201cFrom the time it’s built to the time it’s deployed, there are still engineers that work at all of these organizations that will update the smart contracts,\u201d he said, adding there is still somewhat of a centralization in deploying smart contracts, their security, and monitoring.<\/p>\n

Schwed pointed to the reliance on platforms like Amazon Web Services (AWS), Azure, and Google Cloud for Web3 projects, underscoring that “true 100% decentralization” remains elusive. “There are always centralization choke points in the ecosystem, and a certain level of centralization might actually benefit everyone,” he said.<\/p>\n

Schwed suggests Web3 companies look at their projects as a threat actor, and see where potential vulnerabilities lie. Another option he suggests is seeking out professionals or so-called red teams to address security concerns. For companies that lack the funds to hire these professionals, Schwed suggests offering equity in the organization.<\/p>\n

Despite the risk posed by cybercriminals and hacks, Schwed is optimistic about the future of blockchain technology.<\/p>\n

\u201cI believe that this [technology] has the ability to disrupt and really innovate and provide such value to us as a society, and everybody in this space does and will be more than willing to help,\u201d he concluded.<\/p>\n

\n
<\/p>\n

Stay on top of crypto news, get daily updates in your inbox.<\/h3>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The tech industry has had its eyes fixed on artificial intelligence, and cybersecurity professionals are lining up to find vulnerabilities and patch security holes in AI platforms like OpenAI’s ChatGPT. But blockchain cybersecurity firm Halborn has kept its eyes on the ball, continuing to look for ways to support and secure Web3 projects. \u201cI think […]<\/p>\n","protected":false},"author":2,"featured_media":162859,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[230,225,221,227,226,228,229,60,223,224,222],"class_list":["post-162858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-brave","tag-coinbase","tag-crypto","tag-decentralised","tag-decentralized","tag-decentralized-exchange","tag-erc-20","tag-featured","tag-meme-coin","tag-robinhood","tag-solana"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/162858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=162858"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/162858\/revisions"}],"predecessor-version":[{"id":162861,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/162858\/revisions\/162861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/162859"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=162858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=162858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=162858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}