Protocol Berg v2: Daniel Norman - Don’t Trust, Verify: IPFS for (D)App Distribution on the Web

Thu, Oct 2, 2025, 12:00 AM

The Bybit hack earlier this year, where attackers compromised the AWS-hosted Safe frontend and tricked Bybit into signing malicious transaction resulting in the loss of $1.4 billion, highlighted a longstanding problem: the web—and by extension, (d)apps—is fundamentally built trust rather than verification. This talk will examine how IPFS can be used to distribute web applications in a way that reduces these risks. By using content addressing and local verification, developers can ensure users load exactly the code that was published, minimizing reliance on trust-based distribution. We’ll cover best practices for deploying dapps to IPFS, focusing on recent advancements to enable native IPFS support in browsers by leaning on HTTP as the foundation for interoperability. Protocol Berg v2 12-13 June 2025 Berlin https://v2.protocol.berlin