Jutta Steiner: Secure Smart Contract Development

TL;DR

Developing secure smart contracts and blockchain systems require comprehensive security measures and a strong understanding of potential attack vectors, including social engineering and governance issues. Open-source collaboration, standardization, and a thorough security culture are vital for mitigating risks.

Transcript

really excited to be here with you today unfortunately in this remote capacity and it's a bit odd past midnight here in an empty office that's been empty now for two and half weeks already but we do what we can so let's get started so I have been involved with crypto and security now for more than seven years I think jointly theorem team in 2014 as... Read More

Key Insights

• 🧑‍🏭 Security in blockchain systems encompasses more than just code; it includes factors such as social engineering, governance, and interdependencies between chains.
• 🔒 Thorough security audit processes are crucial for identifying vulnerabilities and ensuring the security of smart contracts and decentralized systems.
• 🔒 Customized runtime models and shared security resources among chains can enhance security in multi-chain systems.

Questions & Answers

Q: What are the key challenges in securing blockchain systems?

Securing blockchain systems involves mitigating vulnerabilities beyond code, considering factors like social engineering, governance issues, and interdependencies between different chains.

Q: How can organizations make smart contracts upgradeable to address unforeseen security issues?

Organizations should consider implementing measures like a multi-signature system and compartmentalization to allow for selective upgrades. This allows for security fixes without compromising the immutability of blockchain systems.

Q: How are security guarantees made between shards within the same chain in a multi-chain system?

In a multi-chain system, sharing security resources, such as common mining or proof-of-stake resources, ensures stronger security guarantees and reduces the reliance on the weakest link in the chain of chains.

Q: How can projects ensure the alignment of incentives between code writers, reviewers, and those affected by security breaches?

Implementing comprehensive review processes, anonymous feedback systems, and incentivizing contributions through bounty programs and treasury funds can align incentives and ensure the security of blockchain systems.

Q: What security considerations should projects keep in mind when evaluating newer blockchains to build on?

When evaluating newer blockchains, it is important to assess the attack surface, threat modeling capabilities, and potential mitigations provided by the framework. Understanding the security tools and measures available is crucial for building secure blockchain systems.

Summary & Key Takeaways

• Blockchain technology has introduced new security challenges due to the complex and interconnected nature of smart contracts and decentralized systems.

• Smart contract development is not agile and requires thorough audit processes, as nearly 50% of vulnerabilities are difficult to detect through testing alone.

• Building a customized runtime model and sharing security resources among chains can enhance security and mitigate risks of attacks.

• Open-source development, crisis communication plans, and strong security cultures are essential in addressing security issues effectively.