New Ethereum talks, every Monday. The week's conference uploads by event, in your inbox.

Loading player…

Future of Threat Prevention by Andrew Beal - We can detect exploits, but how do we stop them?

Ethereum DenverSat, Oct 7, 2023, 12:00 AM

Forta is a real-time threat detection network, and it's getting better at detecting bad actors and exploits on chain BEFORE a loss event occurs using data science and machine learning techniques. But early detection is only half the battle. To actually prevent a loss, a DeFi protocol needs to respond quickly to a Forta alert (often w/in a few blocks). The challenge today is protocols don't have automated emergency response mechanisms - pause buttons are manually triggered by a multisig, and average time to pause a protocol over the last 4 years has been 24+ hours. Too slow to prevent an attack, even if a protocol team knows about it in advance. There are a variety of approaches to ""prevention"" in Web 3 including more advanced automated circuit breakers, new custody models inspired by the hot-cold wallet distribution at centralized exchanges, screening for/blocking high risk transactions at the base layer, and embedding transaction reversibility features at the asset layer. In this presentation, I'll quickly but effectively present the different approaches to exploit prevention (focused primarily on DeFi protocols and bridges), and discuss their unique pros and cons.