Hey Crypto Bro
Sam Colaizzi examines cryptocurrency hype, blockchain security pitfalls, and realistic threat models for decentralized systems.
Summary
Sam Colaizzi delivers an exhaustive, critical analysis of cybersecurity threats across the cryptocurrency and decentralized finance (DeFi) ecosystem in "Hey Crypto Bro," presented at the DEF CON 31 DCGVR Village.
[15:52] Colaizzi evaluates the threat models of various cryptocurrency storage solutions, contrasting non-custodial hardware wallets (Coldcard, Ledger, Trezor) with software hot wallets and centralized exchanges. He dissects the dark web cybercriminal economy [30:18], analyzing specialized threat actor forums where stolen seed phrases, malware logs, and compromised exchange accounts are routinely traded.
[44:33] The presentation examines massive state-sponsored cyber operations targeting the blockchain sector, focusing on North Korean advanced persistent threat groups (such as Lazarus Group / APT38) responsible for stealing billions of dollars through sophisticated cross-chain bridge hacks and smart contract exploits (including the Ronin and Harmony bridge compromises). Colaizzi breaks down specific smart contract attack vectors [58:58]—such as reentrancy, flash loan price manipulation, and compromised multi-sig keys—concluding with defensive best practices for securing digital assets.
(AI summary — Gemini Flash)
Related talks
Blockchain Village·29 min
Josh McIntyre
Deconstructs the elliptic curve cryptography, hashing pipelines, and Base58Check encoding used to generate Bitcoin addresses.
Previews·3 min
An overview of what to expect from the expanded cryptocurrency and blockchain security offerings at DEF CON 33.
Monero Village·20 min
Robin Renwick
This talk presents the methodology, findings and conclusions of a boundary theory based Information Systems research project completed at University College Cork, Ireland. Perspectives of privacy have been analyzed fr...