Security researchers with +5 years dedicated to smart contract security. Co-founder of The Red Guild, a security & education team working for the public benefit of the Ethereum ecosystem. Creator of Damn Vulnerable DeFi. Former lead security auditor at OpenZeppelin.

tincho

Learn to uncover, and protect against, weaponized repositories, sites and tools targeting web3 users, devs & researchers. With examples and hands-on exercises, the session begins with topics like detecting suspicious activity in sites, handling wallet secrets & signatures, decoding calldata of malicious txs, and simulating them to avoid attacks. To then cover more advanced techniques to spot harmful backdoors in code repositories and services that can impact on devs & users’ safety.

Classroom B

Don’t get rekt: practical threat detection for users and devs

Billions of dollars are at risk, and protocols spend millions on security through audits and bug bounties. Have you ever wondered how you can become a top security researcher securing these billions?

In this workshop, 4 recognized security researchers share their experiences on smart contract security with practical tools & techniques to find & report vulnerabilities. Security researchers, even aspirational ones, can take away some key advice to improve their smart contract security skills.