DEF CON 33 Preview

DEF CON 33 Cryptocurrency Areas Preview

Speakers: Michael, Founder, DEF CON Cryptocurrency Areas

Conference: DEF CON

YouTube: https://www.youtube.com/watch?v=mHFcecX4RIA

Overview

This presentation served as a concise yet informative preview of the expanded Cryptocurrency Areas at DEF CON 33. Delivered by Michael, one of the founding members, the talk outlined the significant growth and diverse offerings planned for this year's conference. What was previously known as the cryptocurrency village has evolved into three distinct zones: the Communities area, the Contests area, and a dedicated Vendor area, all designed to cater to the burgeoning interest in blockchain and digital asset security.

The core message emphasized the areas' commitment to education, hands-on learning, and fostering a welcoming community for individuals across all skill levels. From disassembling hardware wallets to engaging with academic researchers and industry experts, the DEF CON Cryptocurrency Areas aim to provide an unparalleled environment for exploring the security landscape of cryptocurrencies. This preview highlighted the collaborative spirit, bringing together academics from renowned universities like Carnegie Mellon and Georgia Tech, alongside industry giants such as Kraken, to enrich the attendee experience.

Background

▶ Watch: Introduction to Defcon's expanded crypto areas (0:00)

The presence of cryptocurrency and blockchain security at DEF CON has a rich history, evolving from initial discussions and niche workshops to a dedicated "village" that has consistently attracted a passionate community. The expansion to three distinct areas for DEF CON 33 signifies a maturation of this interest, recognizing the multifaceted nature of the cryptocurrency ecosystem and the diverse ways in which security professionals and enthusiasts engage with it. The inherent complexity and rapid innovation within decentralized finance (DeFi), non-fungible tokens (NFTs), and underlying blockchain protocols necessitate a continuous educational effort to identify and mitigate emerging threats.

Historically, the cryptocurrency village has focused on practical, hands-on exploration of devices like hardware wallets and cryptocurrency ATM machines, encouraging attendees to delve into their internal mechanisms. This year's expansion builds upon that foundation by integrating a stronger academic component, with researchers and students from institutions like Carnegie Mellon and Georgia Tech participating in workshops and as speakers. Furthermore, the inclusion of industry leaders, exemplified by the participation of Kraken, one of the world's largest cryptocurrency exchanges, bridges the gap between theoretical research and real-world operational security challenges. This holistic approach aims to address the persistent need for robust security practices in a domain frequently targeted by sophisticated adversaries, providing a crucial platform for knowledge sharing and skill development.

Key Findings

▶ Watch: New additions: academics and industry experts (0:56)

This presentation functioned as a promotional preview for the DEF CON 33 Cryptocurrency Areas rather than a technical research talk. Consequently, it did not present specific key findings, discoveries, or research contributions regarding vulnerabilities, exploits, or novel security methodologies. The primary "findings" of this preview relate to the event's structure and offerings, indicating a significant expansion and diversification of content for attendees interested in cryptocurrency security.

Technical Deep Dive

▶ Watch: University involvement: Carnegie Mellon, Georgia Tech (1:07)

As this talk was an introductory preview of the DEF CON Cryptocurrency Areas, it did not delve into specific technical vulnerabilities, exploit methodologies, or detailed architectural analyses. The speaker, Michael, did allude to the nature of activities that would take place within the areas, specifically mentioning the practice of disassembling various devices. These included payment processors, hardware wallets, and even parking meters, with the intent of "looking inside and seeing what makes them run" in the context of the cryptocurrency world.

While this statement points towards a strong emphasis on hardware security, reverse engineering, and low-level analysis as core activities within the village, the preview itself did not provide any specific technical findings or methodologies resulting from such investigations. Attendees are encouraged to participate in these hands-on sessions to gain practical experience in understanding the security posture of physical devices interacting with cryptocurrency systems. The mention of cryptocurrency exchanges as a new focus also implies potential future discussions or challenges related to exchange security, smart contract auditing, and protocol analysis, though no specifics were provided in this introductory announcement.

Demo / Proof of Concept

▶ Watch: The Cryptocurrency Challenge contest details (2:00)

The presentation did not include a live demonstration or a proof of concept for a specific security vulnerability, tool, or research finding. Instead, the talk focused on describing the types of interactive elements and challenges that attendees could expect to engage with during DEF CON 33. This included the Cryptocurrency Challenge, which features seven levels of varying difficulty, designed to test participants' knowledge and skills. The emphasis was placed on hands-on learning through workshops, training, and direct engagement with hardware, suggesting that attendees themselves would be involved in practical exercises rather than observing a speaker-led demonstration.

Defensive Implications

▶ Watch: Who should attend: all skill levels welcome (2:20)

Given that this talk served as a preview for an event and did not present specific attack vectors, vulnerabilities, or novel research findings, there are no direct defensive implications to discuss in terms of mitigating immediate, specific threats. However, the overarching mission of the DEF CON Cryptocurrency Areas inherently aims to bolster the defensive capabilities of the broader cryptocurrency ecosystem.

By providing a platform for education, hands-on learning, and community engagement, the areas indirectly contribute to improved security posture. The activities, such as disassembling hardware wallets and payment processors, are designed to educate participants on the physical and logical security weaknesses of these devices. Understanding these vulnerabilities is a prerequisite for developing more robust defensive measures, whether in product design, secure coding practices for blockchain applications, or operational security for cryptocurrency exchanges. The participation of academics and industry experts further ensures that attendees are exposed to cutting-edge research and best practices in cybersecurity, ultimately empowering them to build, defend, and secure decentralized technologies more effectively. The focus on diverse skill levels, from beginners to advanced hackers, ensures that defensive knowledge is disseminated across the entire community, fostering a more resilient and security-aware user base.

Key Takeaways

• Expanded Presence: The DEF CON Cryptocurrency presence has grown significantly, now spanning three distinct areas: Communities, Contests, and a Vendor area, reflecting the increasing importance of blockchain security.
• Diverse Educational Offerings: The areas will feature a rich array of workshops, training sessions, and the Cryptocurrency Challenge with seven levels of varying difficulty, designed to cater to a wide spectrum of technical expertise.
• Academic and Industry Collaboration: Experts from renowned academic institutions such as Carnegie Mellon and Georgia Tech, alongside prominent industry leaders like Kraken (one of the world's largest exchanges), will contribute as speakers, mentors, and workshop facilitators, enhancing the depth and breadth of content.
• Hands-on Exploration: Attendees will have unique opportunities for practical engagement, including disassembling and analyzing physical hardware such as hardware wallets, ATM machines, and payment processors, fostering a deeper understanding of their security mechanisms.
• Inclusive Community: The DEF CON Cryptocurrency Areas are explicitly designed to be welcoming to all attendees, irrespective of their skill level, including children, families, and advanced hackers. The environment is described as friendly, mild-mannered, and strictly refrains from offering investment advice, focusing purely on security and technology.

About the Speaker(s)

Michael is introduced as one of the founders of the cryptocurrency areas at DEF CON, which he also refers to as the cryptocurrency village. His role involves spearheading the organization and expansion of cryptocurrency-related content and activities within the prestigious security conference. He is instrumental in shaping the community, educational offerings, and hands-on experiences available to attendees interested in the security aspects of blockchain and digital assets. His vision for the areas emphasizes inclusivity, practical learning, and collaboration between academic researchers and industry professionals.