Rajeev is a security researcher and the founder of Secureum & TrustX. Having spent ~25 years doing security research, he dedicates his time to scaling Ethereum security by collaborating with leading initiatives in this ecosystem.

0xRajeev

Smart contract security is of critical importance as the Ethereum ecosystem rapidly expands across different infrastructures & applications. However, there exist serious gaps and misconceptions about security as it relates to smart contract design, development, validation, tooling, offchain components, audits, bug bounties, monitoring & incident response.

This panel brings together six recognized researchers within the Ethereum security ecosystem to help demystify facts from fallacies.

Stage 1

Engineering director at @trailofbits.

Working on blockchain security & program analysis

Josselin Feist

Matthias Egli is a co-founder and the CTO of ChainSecurity. He holds a master’s degree in electrical engineering from ETH Zurich. Before ChainSecurity, Matthias had a prolific IT career both in the Silicon Valley as an expert data scientist, and in Switzerland as a software engineer and C-level executive. During his time at ChainSecurity, he has worked on many audits and contributed to responsibly disclose vulnerabilities in the Ethereum protocol itself.

Matthias Egli

Mehdi Zerouali is a co-founder and Director of Sigma Prime, a leading Sydney-based blockchain security company. Mehdi has been in the information security industry for 13+ years and has performed hundreds of security assessments targeting critical infrastructure. 

With Sigma Prime, Mehdi applies his skills to the Blockchain space, helping prominent projects secure their decentralized protocols.

Mehdi Zerouali

Shmuel_Sagiv is a professor and chair of Computer Sciences at Tel-Aviv University and a CEO and co-founder of Certora. He is a leading researcher in large-scale (inter-procedural) program analysis and one of the key contributors to shape analysis. His fields of interest include programming languages, compilers, abstract interpretation, profiling, pointer analysis, shape analysis, interprocedural dataflow analysis, program slicing, and language-based programming.

Mooly Sagiv

Hari is a co-founder of Spearbit and Cantina. He was previously part of the Solidity team at the Ethereum Foundation.

Harikrishnan Mulackal

Demystifying Smart Contract Security: Facts & Fallacies

https://streameth-develop.ams3.digitaloceanspaces.com/transcriptions/67387c641b0f83434da8a3fc.vtt

Billions of dollars are at risk, and protocols spend millions on security through audits and bug bounties. Have you ever wondered how you can become a top security researcher securing these billions?

In this workshop, 4 recognized security researchers share their experiences on smart contract security with practical tools & techniques to find & report vulnerabilities. Security researchers, even aspirational ones, can take away some key advice to improve their smart contract security skills.

Classroom B

Joran has worked on various aspects of smart contract security. He’s built and worked on lots of security and dev tools including mythril, vertigo and tree-sitter-solidity. This is also his primary focus at Consensys Diligence, where he collaborates with other researchers in building an effective security tool stack. Not just sticking to tools, Joran is an active and successful bounty hunter.

Joran Honig

Nat is an independent security researcher with 4+ years of security experience and 3 years of development experience. She currently specializes in manual smart contract review, invariant analysis and invariant development. She frequently hosts workshops on property testing at conferences and enjoys climbing in her spare time. Nat is the author of solc-select and a former senior security engineer at Trail of Bits.

Nat Chin

Security researchers with +5 years dedicated to smart contract security. Co-founder of The Red Guild, a security & education team working for the public benefit of the Ethereum ecosystem. Creator of Damn Vulnerable DeFi. Former lead security auditor at OpenZeppelin.