// Advanced Pen Testing \n// Red Teaming\n// Threat Hunting\n// Security Advisor As A Service\n

Halborn

Recently, we had the opportunity to catch up with David Schwed, the COO of Halborn, a blockchain cybersecurity firm. is a group of ethical hackers and blockchain specialists with a vision of ensuring top-notch security and safety. Halborn In our conversation, David spoke about prevailing concerns with and the future of Web3 security, the evolution of tech-based security, advice for developers in Web3 and much more. To start, can you please brief us about the current issues pertaining to Web3 security? I would argue there is not enough substance to term it ‘Web3 security’ yet. However, security in Web3, like Web3 itself, is in its early days. We are at a landmark phase where company-owned Web2 is being replaced by user-owned Web3. This ownership element is not only for the funds that a user owns. It is also for the responsibilities that come with ownership. Custody is the keyword. Every act of the user on a blockchain has a cost attached and as self-custodians, they are accountable for any outcome. Another important thing to realize is that most security breaches happen on the application and communication layer of blockchain. The core function of blockchain i.e. a distributed ledger is very rarely the place of attack. Observe closely and you see that smart contracts are mostly exploited during these hacks. Why? Because the environment for writing smart contracts is immature. Programming languages and EVMs are still largely experimental. Programming vulnerabilities account for a majority of security concerns. Lastly, dApp founders and teams think of Web3 security as an end-stage plug-in for their products. They rely on trust first and then tooling and solutions. However, recent hacks and thefts have shown why the element of trust needs to be eliminated and security needs to be a priority. Self-custody for the layman. Raw tooling for developers. Trust-driven DeFi ecosystem. All-in-all, Web3 security is undercooked and needs to be ramped up exponentially to meet today’s sophisticated attacks. What are your views on the evolution of tech-based security in recent times? Also, as we move into Web3, what are the trade-offs we can expect for robust security? Security technology has grown at a rapid pace in recent years. The security is more water-tight than ever before. There are two tangents to this. The first is concrete centralization by parties to store, secure, and render data inaccessible to any third party. And second, make hacks and thefts a costly affair in terms of resources needed. These two tangents have been manifested at scale into many security solutions. Artificial intelligence and machine learning have taken up security by a few notches. The duo has helped build automated and adaptive security networks. In the coming years, AI is set to improve further, and hopefully, it translates into a more secure future for all of us. Lately, blockchain-based cyber-security has started to find its ground. With foolproof authentication and no-trust models, the blend of blockchain into security solutions has started and is ought to grow further. Now, talking about what are the expected trade-offs for Web3 security. If we go by the theory of blockchain trilemma, scalability suffers as security is prioritized i.e. more nodes = more decentralization = more security. Apart from that, I also believe true anonymity cannot be made possible while still upholding the best security ethos. There will be an element of traceability intact. However, I also think Web3 security will be privacy-centric. So, the bottom line is, users’ data, identity, and activity won’t be tracked but can be traced - if needed. Can you share your thoughts on the adaptability of security solutions amidst the convergence of centralized Web2 and a fairly decentralized Web3? First of all, I’d say that cultural integration between the security builders of Web2 and those of Web3 is the top priority. The ethos and the values are very different between these two sects. A simple example of this is how the distribution of data storage is pursued by both these security groups. The Web2 sect views this as high-risk and conforms to their centralized ideals of a single database or server. However, in Web3, a distributed ledger is a means of security. The more the distribution, the more secure the network is. The convergence of security solutions for Web2 and Web3 is a tough ask because there is a contrasting approach to how security is approached. In Web2, there is scope for patches and hotfixes to secure networks. However, in Web3, security needs to be weaved into the architectural design. Making Web2 security solutions adapt to Web3 is a long-term game. From matching encryption standards to building strategic threat prevention tools, convergence needs to be built from scratch. There is room for establishing synergy between both security solutions. However, to ensure maximum security, natively developed solutions are needed. Web3 native knowledge and expertise is a different ball game and is a must while bootstrapping security for the dynamic space. What is your advice to the builders and developers in the Web3, crypto, and DeFi space from a security perspective? I have two pieces of advice for the builders and developers coming up in this space. It is a hard grind; however, neglecting security will only make it exponentially harder. The first one is, Build resilient products with great on-chain security. What I mean by this is to build products and services that have a security-first approach. Resilience is a much-needed trait for any DeFi product or dApp out there. Prioritize security alongside performance and user experience. On-chain security is often overlooked and taken notice of only after it wreaks havoc. From planning to post-deployment, smart contract audits, and cyber insurance, essentially what I’m trying to say is don’t leave any stone unturned when it comes to security and privacy. Second, Cultivate a culture of security and safety practices. Security literacy amongst users is pretty low in this space. The best practices are often expensive (say, a robust cold wallet) or too complex for the layman. Hence, the products and services need to have in-built security. Incentivizing the good players is as important as keeping the bad players away. Bug bounties are a great way to keep good players engaged in continuously improving security systems in Web3. Not only does this incentivize safeguard activities, but it also establishes a culture of security and development in the team. And as this spreads, more security best practices become accessible to all and can be equipped at zero opportunity cost. How do you foresee the future of security in Web3? What are the key developments in this area that you are keeping an eye on? Blockchain pushes for true ownership of money and personal data. Cryptocurrencies and DeFi add to the functionalities of money. ZKPs guarantee privacy. NFTs enable tokenization and control of assets. As you see, the potential is immense. However, for this potential to be realized, a safe, secure, and robust Web3 infrastructure is a must-have. There is no doubt that Web3 security has a huge room for improvement. Unlike other verticals, this needs to be prioritized and not chosen at convenience. A security-first approach is necessary to bring about the mass adoption of Web3, including institutional participation. And coming to the key developments I’m keen on, the first would be MPC i.e. multi-party computation. Roughly, it is where the custody of the private key is shared between the user and service provider, with no one having the full key at any given time. Also, I am a huge advocate of identity-first security. ZKPs are a great tool to enable this. Identity authentication and verification are a must to build security and privacy for the ecosystem. However, the catch is that the users need to be bestowed with control and consent over the data linked to their identity. Another potential game-changer in the space of Web3 security would be enterprise-grade audits. There are barely any. The Web2 cybersecurity giants have little to zero relevance in the Web3 space. So, native Web3 audit firms with a proactive approach are a must for the industry to grow.

David Schwed of Halborn Explores the Culture and Mechanics of Web3 Security

Navigating the Future: Enhancing Bitcoin's Scalability and Sustainability Introduction to Bitcoin's Scalability and Environmental Challenges Bitcoin, the first and most well-known cryptocurrency, has revolutionized the financial world since its inception in 2009. Offering a decentralized, secure, and transparent transaction mechanism, Bitcoin has paved the way for the development of numerous other cryptocurrencies and blockchain projects. However, its journey has not been without challenges. Among the most significant hurdles are scalability and environmental sustainability. The core technology of Bitcoin, the Proof-of-Work (PoW) blockchain, demands extensive computational power, leading to high energy consumption and slow transaction processing times. These limitations have sparked intense debate within the crypto community and hindered Bitcoin's broader adoption, particularly in decentralized applications and social media platforms. The Layer-2 Revolution: A Scalable and Sustainable Solution To address these challenges, the blockchain community has turned to innovative solutions known as Layer-2 protocols. These protocols operate on top of the existing blockchain (Layer-1), aiming to enhance scalability without compromising security or decentralization. Social Network: Pioneering Bitcoin's Layer-2 Staking Protocol One of the most notable advancements in this space is the of the Social Network, a decentralized Bitcoin Layer-2 staking protocol. By launching its testnet, Social Network has introduced a to improving Bitcoin's scalability and environmental footprint. The protocol leverages recent technological upgrades and partnerships to provide a scalable, cost-efficient, and less energy-intensive solution. development groundbreaking approach Collaborations and Innovations A key to Social Network's success is its with industry leaders such as ChainSafe, Halborn Security, Threefold, BloxRoute, and LaunchNodes. These partnerships aim to create a secure and efficient BTC staking platform that supports decentralized social networks, leveraging the security and trustlessness of the Bitcoin blockchain. collaboration Beyond Social Network: The Broader Landscape of Layer-2 Solutions Layer-2 solutions are not limited to staking protocols. Other technologies, such as Rootstock and Stacks, extend Bitcoin's functionality through smart contracts and decentralized applications (dApps), further enhancing the network's scalability and interoperability with Ethereum. These introduce new functionalities to the Bitcoin ecosystem, improving transaction speeds and offering new opportunities for blockchain applications. developments The Path Forward: Envisioning a Greener, More Connected Digital Future The unveiling of Layer-2 protocols, such as the Social Network, heralds an era of transformation for the Bitcoin network, emphasizing not just technological advancement but a commitment to ecological responsibility. These innovations signal a pivotal shift towards creating a Bitcoin ecosystem that is both scalable and environmentally conscious. The significance of these developments extends beyond the immediate community to hint at a future where blockchain technology is integral to a sustainable global digital economy. Bridging Technology and Sustainability Layer-2 solutions like Social Network are more than just technical feats; they are a testament to the blockchain community's resolve to foster a digital realm that prioritizes sustainability alongside scalability. This evolution is critical for the wider acceptance and integration of Bitcoin into decentralized applications, paving the way for a future where blockchain's potential is fully unleashed without sacrificing our planet's health. Catalyzing Transformation Across the Digital Landscape The ripple effect of Layer-2 advancements stretches far beyond the confines of the Bitcoin network. By addressing the pressing issues of scalability and environmental impact, these technologies open the door to an array of possibilities for decentralized platforms and applications. The emergence of these solutions could revolutionize how we interact with digital and financial systems, making them more accessible, efficient, and, importantly, sustainable. A Collaborative Journey Towards Innovation The path to realizing the full potential of blockchain technology is a collaborative endeavor, requiring the collective effort of developers, researchers, and industry visionaries. It is through this synergy that the community can navigate the complex web of challenges that lie ahead, driving forward innovations that balance technological advancement with environmental stewardship. Pioneering a Sustainable Digital Financial Ecosystem The transition towards Layer-2 solutions marks a critical step in Bitcoin's evolution, offering a blueprint for overcoming its inherent challenges. By enhancing the network's scalability and minimizing its ecological footprint, the blockchain community is laying the groundwork for a digital financial ecosystem that is inclusive, efficient, and, above all, sustainable. This journey is laden with both opportunities and obstacles, yet the promise of innovation and collaboration lights the way towards a brighter, greener future. The advancements in Layer-2 technologies are not just reshaping the Bitcoin network; they are redefining the boundaries of blockchain's role in a sustainable digital economy. As we stand on the brink of this new era, the collective endeavor of the blockchain community will undoubtedly propel us towards a future where digital innovation and environmental sustainability go hand in hand, heralding an age of digital finance that is as green as it is global. Don’t forget to like and share the story! This author is an independent contributor publishing via our brand-as-author program. Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR Vested Interest Disclosure:

Social Network Leads the Charge in Bitcoin's Layer-2 Evolution: A Greener Future Awaits

সোশ্যাল নেটওয়ার্ক বিটকয়েনের লেয়ার-২ বিবর্তনে দায়িত্ব পালন করে: একটি সবুজ ভবিষ্যত অপেক্ষা করছে

Soziales Netzwerk ist führend in der Layer-2-Entwicklung von Bitcoin: Eine grünere Zukunft erwartet Sie

La red social lidera la evolución de la capa 2 de Bitcoin: le espera un futuro más verde

Le réseau social mène la charge dans l'évolution de la couche 2 de Bitcoin : un avenir plus vert vous attend

सोशल नेटवर्क बिटकॉइन के लेयर-2 विकास में अग्रणी भूमिका निभाता है: एक हरित भविष्य की प्रतीक्षा है

ソーシャルネットワークがビットコインのレイヤー2進化の先頭に立つ: より環境に優しい未来が待っている

소셜 네트워크는 비트코인의 레이어 2 진화를 주도합니다: 보다 친환경적인 미래가 기다리고 있습니다

A rede social lidera a evolução da camada 2 do Bitcoin: um futuro mais verde o aguarda

Социальная сеть лидирует в эволюции Биткойна второго уровня: нас ждет более экологичное будущее

Sosyal Ağ, Bitcoin'in 2. Katman Evriminde Liderlik Ediyor: Daha Yeşil Bir Gelecek Bekliyor

Mạng xã hội dẫn đầu trong quá trình phát triển lớp 2 của Bitcoin: Một tương lai xanh hơn đang chờ đợi

社交网络引领比特币第 2 层进化：更绿色的未来正在等待

461 Stories To Learn About Slogging

The Driving Force of Orion's Web3 Innovation with Stéphane Doueihi : Hello, Stéphane Doueihi; it's a pleasure to welcome you to our "Behind the Startup" series. We're excited to delve into your journey and the breadth of your expertise. Moreover, we would greatly appreciate it if you could shed light on the inspiration behind the ORION mission and how it envisions revolutionizing our online interactions through the utilization of technology. Ishan Pandey Web3 : Orion's mission is to revolutionize DeFi by integrating centralized and decentralized exchange liquidity, providing direct access from personal wallets. This approach lowers trading fees, democratizes access to prime crypto prices, and redistributes wealth globally. Our vision extends beyond traditional online interactions, harnessing Web3 technology to lead in DeFi trading innovation and establish Orion as a primary, community-driven crypto trading platform. Stéphane Doueihi : DAOs have gained a lot of attention recently. How is Orion utilizing DAO structures, and what are the advantages and challenges you've encountered in implementing them? Ishan Pandey : Our transition to a DAO structure signifies a major evolution in Orion's journey, emphasizing decentralized governance and community engagement. This shift towards a DAO model is pivotal, as it represents Orion’s commitment to transparency, resilience, and innovation in governance. It's a strategic move towards a more democratic and user-empowered ecosystem, aligning with the core principles of decentralization in DeFi. Stéphane Doueihi : As an early adopter in the blockchain domain, what inspired you to be an Orion DAO ambassador, and what do you envision for its role in the future of the crypto ecosystem? Ishan Pandey : My role as an Orion DAO ambassador and external representative at events and interviews is to advocate for Orion's trailblazing technology in blockchain and DeFi. I'm inspired by Orion's unique approach to liquidity aggregation, allowing decentralized access to top exchanges like Binance, KuCoin, and OKX, a feature that sets Orion apart in the blockchain world. Stéphane Doueihi My role as an Orion DAO ambassador also involves promoting Orion's unique liquidity protocol, which is a game-changer in the DeFi space. This protocol is not only powering Orion but is also available for third parties, potentially bringing all centralized exchange (CEX) liquidity into DeFi. This capability is pivotal in transforming how liquidity is accessed and utilized in the decentralized finance ecosystem. : Could you provide insights into ways you can support the ORION ecosystem, and how people are empowered being part of the eventual DAO? Ishan Pandey : In the Orion ecosystem, the veORN system offers significant APR for governance participation. Simultaneously, our 'Refer & Earn' program drives deeper user engagement with exponential rewards based on network effects, making it both sustainable and lucrative. These innovative programs empower users within the DAO, promoting a dynamic and active community central to Orion's decentralized philosophy. Stéphane Doueihi : Interoperability is a crucial aspect of blockchain. How does Orion facilitate the seamless exchange of assets across different blockchains, and what are the technical hurdles you've had to overcome to achieve this? Ishan Pandey : Orion Bridge exemplifies our commitment to seamless, ultra-fast, and secure cross-chain transfers. Its simplicity and user-friendliness, coupled with strong security measures, make it a standout in the blockchain space. This interoperability, integrated directly into Orion Terminal, offers users a hassle-free and secure trading experience across various blockchains. For more insights, I invite you to explore our detailed documentation. Stéphane Doueihi : Security is a paramount concern in the blockchain and cryptocurrency sector, especially considering the increasing sophistication of cyber threats. Can you share with us the details about the security audits and safeguards Orion has in place to protect its platform and users' assets? Additionally, how does Orion ensure ongoing security in the face of rapidly evolving digital threats? Ishan Pandey : Security is paramount at Orion. Our comprehensive approach includes rigorous audits by top firms like Halborn and continuous system monitoring. These measures, combined with our unique liquidity aggregation model, ensure a secure trading environment, protecting user assets against evolving digital threats. Stéphane Doueihi Uniquely, we are TVL-light by design, utilizing atomic swaps and other advanced technologies to ensure safer transactions, though these technologies are complex to implement. Our liquidity aggregation model further ensures a secure trading environment against evolving threats. : The crypto industry is known for its rapid innovations. How does Orion stay ahead of the curve in terms of technology and product development, and what strategies do you employ to remain competitive? Ishan Pandey : Orion has consistently stayed ahead of the curve, focusing on creating innovative products from scratch using first principles rather than merely copying or forking existing projects. Orion's achievements, including our unique decentralized access to major exchange order books, an ultra-fast cross-chain bridge, a 5-tier referral system, and much more (such as our upcoming mobile app!), underscore our commitment to staying ahead in the crypto market. Our approach to innovation, focusing on user-centric features and community feedback, positions us at the forefront of the DeFi space. Stéphane Doueihi : What are some of the most exciting use cases or trends you see emerging in the crypto and blockchain space, and how is Orion positioned to capitalize on these opportunities? Ishan Pandey Stéphane Doueihi: Account abstraction is an exciting trend, and we're exploring it to simplify our trading UI/UX. Orion's strategic positioning allows us to leverage such cutting-edge concepts, enhancing our liquidity aggregation technology and community-driven development, further establishing our leadership in the sector. Don’t forget to like and share the story! : Vested Interest Disclosure This author is an independent contributor publishing via our . Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR brand-as-author program

Exploring the Future of Crypto Trading and Web 3 with Orion's Stéphane Doueihi

In the vast landscape of financial evolution, Decentralized Finance (DeFi) has emerged as a beacon of promise, offering solutions that challenge traditional banking's core. However, as with any innovation, it brings its own set of challenges. From daunting complexities that deter the average user to regulatory mazes that even experts and project founders struggle with, DeFi's journey to mainstream adoption is riddled with hurdles. It is because of these hurdles that I am writing to you. To tackle this problem, it's essential to provide a comprehensive perspective on the seemingly idealistic concept of DeFi. It's crucial for individuals to recognize and acknowledge these challenges, as users are currently facing distressing issues. And as long as these hurdles remain unresolved, going mainstream is a delusion. What is DeFi? Decentralized Finance, also known as , refers to a financial system where traditional financial services can be rendered in the blockchain without the help of intermediaries like banks. DeFi To send or receive money in traditional Finance, you need trusted intermediaries like banks or fintech platforms like PayPal to facilitate the transaction. However, the rise of DeFi has changed the game of money as it permits the trading of digital assets like Bitcoin without third parties or intermediaries. Scam Defi Projects and How People Lose Funds to Them Although DeFi has several advantages, it also comes with many risks. Here are three risks associated with DeFi: Wallet Hacks A popular method used to hack Wallets is the Read-Only Reentrancy. After lost $3.8 million to an attack in July this year, the company revealed that BlockSec recognized ‘read-only reentrancy’ as the root cause of DeFi attacks. Conic Finance Reentrancy is a smart contract bug that makes an intelligent contact vulnerable to hackers. The bug allows hackers to trick the smart contract into stealing assets by making external calls to a malicious contract. This means that users don’t need to share their private key (similar to your bank app password) before they can lose their money to hacks. Although DeFi accounted for a small portion of the lost to in 2022, DeFi is even dragged into these schemes, making investors more wary than ever. Ponzi Schemes Disguising as DeFi $7.8 billion Ponzi schemes Exit Scams An exit scam is a category under a rug pull that occurs when a founder creates a DeFi project and aggressively promotes it so people can invest. After gathering enough investor funds, he abandons the project and disappears. Losses in DeFi From 2020 to date Below are some hacks that happened from 2020 till now. 2020 DeFi Exploits and Hacks In 2020 alone, the crypto industry faced 17 major DeFi hacks that led to a cumulative loss of $154 million; see some of them below: bZx (February 15, 2020) bZx protocol was exploited twice in 4 days and lost over $900,000. The first attack occurred on Valentine's Day, where they lost $320,000. Later in the year, they lost $600,000 to hackers. Lendf. Me lost almost all its assets to an attack, as its locked value dropped from $25 million to about $10,000 in 24 hours. Lendf.Me (April 19, 2020) Harvest Finance, which lost $24 million, was among the noteworthy hacks in 2020. Following the hack, the platform recorded an over 50% drop in total value locked (TVL). Harvest Finance (October 26, 2020) Warp Finance —a DeFi platform for lending lost $7.7 million to a flash loan attack. Warp Finance (December 18, 2020) Over $2.4 billion was lost to DeFi hacks alone (an increase of 1,330% compared to 2020). Below are some projects that were affected by this hack. 2021 DeFi Exploits and Hacks THORChain suffered an exploit on June 28, 2021, where it lost $140,000, but another unfortunate exploit on July 15, where it lost $4,900,000. It suffered a third exploit on July 23, losing about $8 million. THORChain (July 23, 2021) DaoMaker lost $4 million in 2021 to a reentrancy attack, as reported by @Mudit__Gupta. Dao Maker (September 4, 2021) Poly Network is a DeFi app that helps traders move assets like Bitcoin from one blockchain to another. Poly Network lost roughly $600 million in 2021. The hacker noticed a Poly Networks code bug and manipulated the smart contract to withdraw any amount they wanted. Poly Network (August 10, 2021) However, Poly Network made a smart move after the hack. They contacted the hacker and offered them $500,000 and the role of Chief Security Adviser. Following the offer, the hacker returned all the stolen assets. An unknown hacker stole about $18.8 million (418,311,571 in AMP and 1,308.09 in ETH) from Cream Finance in a flash loan attempt. Cream Finance (August 30, 2021) 2022 DeFi Exploits, Hacks, and Scam To date, 2022 witnessed the highest combined loss from DeFi exploits. See some of them below. Qubit Finance is a DeFi that runs on the Binance blockchain. It lost over $80 million to an exploit in January 2022. Qubit (January 28, 2022) In February 2022, Wormhole, a multichain bridging platform, encountered one of the most significant losses from DeFi exploits. The breach resulted in a loss of $320 million worth of Wormhole (February 3, 2022) Wrapped Ethereum (WETH). Ronin Network is a gaming-focused platform that lost over $625 million in USDC and ether (ETH) to an exploit. The loss affected the popular Axie Infinity game and the Axie DAO. Ronin Network (March 29, 2022) 2023 DeFi Exploits, Hacks, and Scams was stolen in the year's first half, and here are some examples: Over $471.43 million SafeMoon lost $9 million worth of tokens (over $200,000,000) to a hack earlier this year. SafeMoon (March 29, 2023) While 2023 hasn’t ended yet, many more DeFi have lost millions of dollars, like Hundred Finance, which lost $7 million to hacking. Hundred Finance (April 15, 2023) On June 2, 2023, the founder of Uniswap responded to a tweet saying he wasn’t aware of the Uniswap event held by a group in Shenzhen, China (and it must be a scam). Uniswap (June 2, 2023) The fake event titled “First Uniswap Asian Summit” had the so-called “CEO of Uniswap” in attendance. The scammers had created a fork of the original Uniswap site with Chinese community content and links to the original app. Halborn tweeted a comprehensive list of hacks in 2023, with Poly Network suffering a repeat attack and loss of $10 million. Poly Network (July 2023) 2021 exploits were higher than the 2020 hacks. Then, in 2022, the hacked volume was higher than in 2021. The hacking in the Web3 is on an upward trend. Why DeFi Won’t Go Mainstream The continuous incidents and loss of money will only discourage investors as there is a lack of trust. Security Concerns DeFi needs regulation to prevent continuous losses, but regulation doesn't work well with decentralization. Regulation Concerns The main idea of decentralization is that no single party will have control over the platform, but with regulation, a body has to maintain control. However, due to the decentralized nature of DeFi, regulators will keep facing challenges with controlling it. Hence, the exploits will continue. This is because exploits are often done to smart contracts, not the regulatory bodies. DeFi remains challenging to non-technical users, and without the proper knowledge, users can lose money due to a mistake they made on the platform. Complexity What do all these figures mean? These figures mentioned here may sound like just numbers to you. However, these are people's hard-earned money. There are people's life-saving. These are people's school fees, house rent, etc. You may not be in support of people using money for such priorities to invest in crypto, but you cannot be quick to blame these investors if the protocols weren't secured enough to protect their funds. Some individuals put their money in low-yield and low-risk investment vehicles within the DeFi ecosystem to escape inflation in their local currency. There is an urgent need to address security concerns in DeFi before discussing mainstream adoption. Since DeFi is an open-source movement, developers and founders must work towards improving their smart contracts to stop hackers from taking advantage of bugs in the code. If things continue this way with losses from hacks, DeFi will remain an option, not the mainstream choice. So far, projects that conduct bounties for the community to find loopholes in their smart contracts haven't been exploited.

Why DeFi Won’t Go Mainstream

Eowyn Chen, the pioneering force steering the helm of Trust Wallet, opens up in this candid chat about decentralization, navigating the crypto cosmos, and the perpetual balancing act between innovation and security. Dive into an enlightening conversation that merges the spirit of entrepreneurship with the quest for a decentralized future. Inside Look: How Trust Wallet's Security Scanner is Revolutionizing Crypto Safety Ishan Pandey: Hi Eowyn, welcome to our series “Behind the Startup.” Please tell us about yourself and the story behind Trust Wallet? Hello Ishan, it's a pleasure to be here and thank you for inviting me to this enlightening series. Eowyn Chen: I currently have the privilege to lead Trust Wallet as the CEO, steering one of the world’s largest multi-chain, non-custodial crypto wallets. Our vision is to empower tens of millions of users globally with freedom foundations - providing them with the ownership to directly manage their digital assets on blockchains. Before joining Trust Wallet, I sharpened my skills as the VP at Binance leading the central marketing team. Our mission was clear, yet ambitious: scaling user numbers from tens into hundreds of millions. We achieved this through great collaboration and support from the community. Prior to my immersion in the blockchain space, my career spanned different facets of business. I participated in the go-to-market launch for international startups. My foundation was laid at Oliver Wyman in New York, where I honed my skills as a management consultant for financial services and introduced me to blockchain as a technology that could improve the existing outdated financial tech stacks running behind the banks. Now, about Trust Wallet's genesis. Viktor, a freedom fighter and visionary, had been someone I shared many spirited discussions with and admired to work with one day since 2018. We knew each other in late 2018 when Binance acquired Trust Wallet. At the start of 2022, he reached a pivotal decision: his passion was steering him towards product and technical development only without worrying about the rest of the business. And I was at a turning point that I yearned to be closer to the innovative frontier of the industry and be closer to the decentralized community. Seeing the potentials of the great team and product, and aligning with his vision, I took up the reins. Our team at Trust Wallet is as unique and decentralized as the product we're building. We span across 19 different time zones. This geographical diversity is not merely a statistic; it's a testament to our commitment to creating a decentralized world. The decentralized nature of our team fosters creativity and innovation, allowing us to better understand the needs of our global user base. In essence, Trust Wallet is more than just a company; it’s part of a movement towards a more transparent and accessible world that empowers everyone for the digital future. We're not just building a product; we're on a journey with the community towards the mission. It's a thrilling journey, and I'm grateful for the opportunity to be a part of it. Thank you for letting me share our story. Ishan Pandey: Please tell us a little bit about Trust Wallet and how the company aims to address the crucial challenge of storing virtual assets securely amidst all-time-high cybersecurity threats? Certainly, Ishan, I'd love to dive into Trust Wallet's mission and how we're addressing the vital challenge of securely storing virtual assets, particularly in the context of the ever-increasing cybersecurity threats. Trust Wallet is a gateway that enables users to explore and interact with over 80 blockchains, access and manage NFTs on 15 chains and 10+ million digital assets. We pride ourselves on being the No. 1 mobile wallet globally in active usage and downloads; and since our web extension's launch in November 2022, we've rapidly risen to top-tier status with over a million installs as well. Eowyn Chen: Our aim? To demystify and simplify the Web3 experience. We strive to create a powerful yet user-friendly platform where people can securely access dApps, try DeFi, and stake crypto to contribute to chain security and get rewards. All these features are integrated into a seamless environment, marrying convenience with security. Security is not just an add-on at Trust Wallet; it's embedded in our core philosophy. We understand the gravity of cybersecurity threats, and we have initiated rigorous measures to assure our users that our mobile app and browser extension are robustly safeguarded. Here's what we've done: Intensive Auditing: To ensure our own operational and coding hygiene, we increasing our security audits and audit coverage to +30 a year, engaged multiple top-tier, third-party external auditors like Cure53, Certik, Halborn and Kudelski to assess our security, and published two updated s performed by Cure53 and Certik this year so far, with more to come. report User security features: we have updated our security scanner feature just a few weeks ago, which improves the UX and database accuracy to warn users of risks when sending funds to reported scammy addresses and dApps. We proactively decided to make tools open source and authored EIP-6865 to help the space all become cleaner, which I think security should be a public good that benefits all industry participants and leaves less room for evil to survive. Transparency: Our wallet-core is also open-source, which allows anyone to verify our security measures. We believe that transparency is crucial for building user trust, and we are committed to providing our users with utmost security and peace of mind when using web3 and wallets. User Education: Recognizing that security is a two-way street, we are relentless in educating our users. Through various community channels, we generate educational content to emphasize the importance of personal responsibility in safeguarding private keys. Learning and Growing: While we strive for excellence, we acknowledge that 100% security in the on-chain world may be unattainable. The true measure of our commitment lies in how we learn from each incident, taking full responsibility and turning those lessons into actionable improvements to help our users secure their assets and enrich their Web3 experience. Ishan Pandey: What are your views on the rise of AI and how it may be used for conducting cybersecurity attacks? AI holds remarkable potential in various fields, and its rise is a testament to the strides being made in technology. For instance, we use GPT-powered AI bots to support users on 80% of the basic blockchain and decentralized questions that could be solved through education. However, like any potent tool, its use for cybersecurity attacks is a concern. As AI evolves both technologically and regulatory-wise, it's important we maintain a balanced perspective, acknowledging its immense benefits while diligently working to mitigate risks. As with any potential or emerging threat, our security team has their finger on the pulse in this area and we continue to monitor it closely. Eowyn Chen: : This author is an independent contributor publishing via our . Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR Vested Interest Disclosure brand-as-author program Ishan Pandey: How does the Security Scanner feature introduced by Trust Wallet contribute to the evolution of security practices in the world of cryptocurrency? Security isn't just a feature at Trust Wallet; it's an integral aspect of our mission to foster a safer and more transparent world of cryptocurrency. Hence we continuously try to improve existing features like security scanners to be more accurate and useful for users to make more informed and safer decisions. Eowyn Chen: Automatic scam protection: Users don't need to set up the security scanner. It warns them automatically if they try to send money to a scammer or use a harmful dApp. Transparency and Education: Our Scanner doesn't just identify a threat; it explains why something is being flagged. This transparency ensures that users know more about the underlying risks. It's a step toward building a more knowledgeable and resilient community of users. Data Accuracy: We gather threat data from various sources, including user-reported scammer addresses and malicious DApps. Our dedicated team verifies this information for increased accuracy. This collaborative approach helps keep users and transactions secure. User Autonomy and Control: In line with our commitment to providing a user-centric Web3 experience, Our Security Scanner warns but does not has right to block transactions, giving users the option to proceed or even turn off the feature. It's a delicate balance between safeguarding assets and preserving individual freedom, reflecting the ethos of the decentralized world. Openness and Collaboration: Our approach to security extends beyond our own ecosystem. By embracing open-source principles, we've made strides to foster an industry-wide movement towards standardized and more robust security practices. This spirit of collaboration represents a maturity in how security challenges can be tackled collectively. As mentioned above, we proactively decided to make our transaction simulation tool open source and authored EIP-6865 to help the space become cleaner, which I think security should be a public good that benefits all industry participants and leaves less room for evil to survive. Adaptability and Evolution: Security threats are ever-changing, and so is our Security Scanner. We constantly refine and update it to stay ahead of emerging risks, reflecting our belief that security is a dynamic process that must evolve with the landscape. Ultimately, user security features like the Security Scanner and transaction simulation serve to build trust and confidence in the Web3 experience. By providing a safe, transparent, and user-friendly tool, we're not just enhancing our own platform but contributing to the broader narrative of credibility and responsibility in the cryptocurrency world. Ishan Pandey:  Given the constant evolution of cybersecurity threats, how does Trust Wallet plan to continuously adapt and improve the Security Scanner feature to keep up with these changes? The relentless evolution of cybersecurity threats is indeed a profound challenge, one that demands an equally relentless response. At Trust Wallet, we don't see security as a static feature but as a dynamic, ongoing pursuit. Security Scanner and similar user features will always take an iterative development and update process. Eowyn Chen: As you mentioned, we've recently launched Security Scanner Version 2. This wasn't just an update; it marked a significant evolution with the introduction of risk descriptions to the addresses, improved risk detection accuracy, and the ability to scan for malicious dApps. For our Android users, this means enhanced protection when accessing potentially scam sites. Currently, the security scanner supports the EVM chains. In the near future, we plan to expand its compatibility to include additional networks, such as Solana, TRON, BTC etc. This development will provide a more comprehensive security solution, covering a broader range of digital assets and enhancing overall user protection. However, this is just one step in a continuous journey, and we are already hard at work on future iterations. Ishan Pandey: How might the SEC's potential regulation of cryptocurrencies impact the future development and adoption of these digital assets? The SEC's potential regulation of cryptocurrencies might be  a pivotal concern for the future of digital assets. On the one hand, clear regulations can foster trust and facilitate wider adoption, bringing Web3 closer to mainstream acceptance. It's an opportunity for the crypto industry to align with established regulatory standards, which can enhance consumer confidence. Eowyn Chen: On the other hand, inappropriate or overly restrictive regulations may stifle innovation, hampering growth, and potentially pushing activities into less secure environments. This could lead to higher risks for users. Recent legislative actions, like the "Keep Your Coins Act of 2023," reflect an evolving regulatory landscape and the efforts to establish protective frameworks for digital assets, including self-custody wallets. We believe it's essential for all stakeholders to work collaboratively and communicate effectively to create a balanced and wise regulatory approach that supports innovation while protecting users. The success of cryptocurrencies depends on finding this balance. Ishan Pandey: How are the roles of governments and regulatory bodies expected to evolve with the growth of the Web3, blockchain, and cryptocurrency sectors? The growth of Web3, blockchain, and cryptocurrencies is nothing short of exciting, but with this innovation comes a real responsibility. Governments and regulatory bodies will inevitably play a crucial role in shaping this new frontier. It's not just about rules and regulations; it's about building a bridge between the traditional world and this emerging technology landscape. Eowyn Chen: Collaboration is key. We need to work hand-in-hand with regulators to ensure that we're protecting consumers without stifling the creativity that makes this space so vibrant. This isn't a one-size-fits-all situation, and it's our collective responsibility to ensure that we're fostering innovation while keeping an ever-watchful eye on potential risks. It's a delicate balance, but I firmly believe that with transparent dialogue and a shared commitment to what's best for everyone involved, we can create an environment where Web3 doesn't just grow but thrives. Together, we can push the boundaries of what's possible, and in doing so, shape a future that benefits people all around the world. Don’t forget to like and share the story!

Behind Trust Wallet: A Glimpse into the World's Leading Multi-chain Crypto Wallet

Detrás de Trust Wallet: un vistazo a la billetera criptográfica multicadena líder en el mundo

Derrière Trust Wallet : un aperçu du leader mondial des portefeuilles cryptographiques multi-chaînes

ट्रस्ट वॉलेट के पीछे: दुनिया के अग्रणी मल्टी-चेन क्रिप्टो वॉलेट की एक झलक

Trust Wallet の裏側: 世界をリードするマルチチェーン暗号ウォレットを垣間見る

Por trás da Trust Wallet: um vislumbre da carteira de criptomoedas líder mundial em várias cadeias

Đằng sau Trust Wallet: Tổng quan về Ví tiền điện tử đa chuỗi hàng đầu thế giới

Trust Wallet 背后：世界领先的多链加密钱包一瞥

, I am a co-founder and security researcher from Cyfrin where we do smart contract audits. This is my opinionated take on top smart contract audit firms along with Cyfrin. The only way Web3 scales is if we increase our security, so I want to ensure that other top firms get the exposure they deserve. Auditors left off this list are not necessarily poor choices, I may have just missed them. What is a Smart Contract Audit A is a time-boxed security-based code review on your smart contract / Web3 system. An auditor’s goal is to find as many vulnerabilities as possible and educate the client on ways to improve the security of their codebase moving forward. smart contract audit Auditors use a combination of manual and automated tools to find these vulnerabilities. However, a smart contract audit does not guarantee your code is bug-free. At the end of the day, your protocol's security is yours and your auditor's responsibility, and sometimes multiple audits or another security tooling might be needed. A professional audit group can and will give you all the guidance you need to move forward on your security journey so you can feel confident deploying. You can learn more about what is a smart contract audit here. Why We Need Smart Contract Audits The image above represents the total dollar amount stolen from DeFi for the entire year of 2022, 80% of that value was exclusively in DeFi. According to , the current locked value of all DeFi is 50 billion dollars. DeFillama This means that over 6% of all DeFi value has been subject to a hack! If we want blockchain and DeFi to come to the masses, they cannot be worried that there is a 6% chance they will wake up to find their funds exploited. We have to do better than this. This is why audits are so important: Keep your protocol safe Help Web3 gain authority Educate your team on best practices That last bullet is what I call the Getting an audit and working with a group of security and smart contract experts can improve your team's skill in developing protocols. They should give you feedback on vulnerabilities educate your team on improving. They are security and developer experts, after all! hidden benefit of smart contract audits. and How to Choose a Smart Contract Auditor Understand the auditor skill set Understand your price point Understand their methodology Understand the auditor skill set You want to ensure the auditor has done work in the domain you’re looking for an audit on. If you want an audit on Solana and you work with an EVM specialist group, you’re going to have a bad time. Maybe you want a DeFi audit, and you’re working with a firm that only understands NFTs; this is also a recipe for disaster. An easy way to see what kinds of projects an auditor can do is to look at a list of their previous audits. Most auditors will have some publicly displayed audits as a showcase of work, and you can decide based on their past if they are right for you. Understand your price point Large firms will often cost more than smaller firms and independent auditors. Typically, you can find “cheaper” audits with smaller companies and independent auditors, but the quality can vary. I’ve seen a of fantastic solo auditors, though, so don’t discount a solo auditor who wants to audit your protocol. ton Pricing varies wildly depending on the auditors, so understand the next point to get the best idea for a price point. Understand their methodology https://www.youtube.com/watch?v=A-T9F0anN1E&embedable=true Before locking down any payment, you need to verify the following: Exactly which auditor(s) will conduct the audit What tools will they use (fuzzing, formal verification, etc) If they want a communication channel between your developers and the auditors are not machine auditable and often come from poor implementation of business logic. Because of this, auditors need as much context as possible in the form of: 80% of hacks Documentation Q&A Channel with Developers Code Natspec If an auditor doesn’t tell you who is doing the audit, what tools they are using, or doesn’t want to have a direct line of communication between your protocol devs and the auditors, there is a good chance they are going to do shoddy work. Additionally, I think auditors should try to improve your test suite with , but it’s not required. fuzzing/property/invariant tests How to Prepare for a Smart Contract Audit Imagine two random developers drop 5,000 lines of code you’ve never seen on your desk and tell you that the code needs to be cleaned up and spotless in two weeks. Developer A tells you what the code should do, it has a test suite, and they say, “feel free to ask me any questions you may have!” Developer B says, “Don’t talk to me till it’s done.” Your review of developer A’s code will be 100 times better than developer B. Be like developer A. To get the most out of an audit, you should: Have clear documentation Robust test suite (Ideally, including ) fuzz tests Code should be commented & readable Modern best practices followed A communication channel between developers and auditors You are prepared to do an initial video walkthrough of your code You want to think of you and your auditor as a team to get the best results out of your audit. One of the best ways to do this is to have a dedicated channel where auditors can ask questions to the developers. Additionally, the more context, documentation, and information they can read, the better. Be sure it’s easy for anyone to walk through your code and understand what it’s supposed to do. 80% of all bugs are due to business logic issues, so the auditors need to understand what the protocol should do more than they should understand the actual code! You can learn more about the . smart contract auditing process here Top Smart Contract Auditors I wanted to make sure you had all this context before giving you this list because I’ve seen protocols that want an audit for one of two reasons: Marketing Security & Marketing Be like #2. Getting “an” audit and treating all audits the same can be tempting but should be done. You want to treat an audit like you and your auditor are teaming up to secure your code. not Here it is, my list of top 7 auditors in no particular order, and why I think they are a top auditor. Cyfrin As someone who wants to see the success of Web3, I was furious with the state of security in Web3. $3.8B lost in 2022 is a horrifying statistic, so I felt compelled to jump in and help secure DeFi and blockchain. Please keep in mind I am the co-founder of . Cyfrin The Cyfrin team has some of the top engineers and auditors in the space, like: | #1 Ranked Auditor as of Writing on Code4rena Hans | Ex-Chainlink Labs Engineer in charge of $5B+ DeFi integrations Alex | Code4rena Top Finisher and Experienced FinTech Engineer 0Kage | Code4rena Top Finisher & Expert Solidity Engineer Carlos | Expert Solidity Engineer Gio | Patrick Most Watched Solidity Education Video(s) of All Time We thrive on finding as many bugs as possible and finding ways to and test suite. improve your codebase Web3 security needs a new narrative, and we are excited to push the security space forward. We are a smaller group at the time of writing as we only launched 2 months ago! You can find a , including the Beanstalk Wells integration and LinkPool. list of notable audits (and skillsets) for Cyfrin here Trail Of Bits I tell people to check out . They are one of the firms in Web3 security consistently pushing the bar in a practical sense. They don’t just give an audit, they give you all the tools you need to be successful in smart contract security as well. always Trail of Bits The Trail of Bits team builds some of the most popular and widely used tools like: Slither Manticore Echidna Properties And so many more. They are dedicated to educating the Web3 space as well with tons of free educational content and blogs. https://www.youtube.com/watch?v=3pWYvtx_sjA&embedable=true Trail of Bits is a large group consistently rated one of the top firms in Web3 for good reason, and I’d definitely classify myself as a fanboy. You can find a , like Uniswap, Yearn, and Compound. list of notable audits (and skillsets) for Trail Of Bits here OpenZeppelin is another group that constantly pushes the envelope by raising the state of Web3, which is why I’m a massive fan of their work. The is the standard library for solidity that 95% of the rest of Web3 uses and trusts to build their smart contracts. OpenZeppelin OpenZeppelin Contracts You should hold onto every report you read from the OpenZeppelin team like gold, as the information they give is some of the best in the business, and their team is constantly raising the bar for security. OpenZeppelin is a large group used by some of the top protocols in the space, like Aave, Optimism, and Compound. I really can’t speak highly enough about the skills of this team. You can find a list of notable audits (and skillsets) for OpenZeppelin here. Consensys Diligence Part of the team, one of the most well-known groups in Web3 behind projects like Metamask, Infura, and Truffle, their security team is also first-class. They are a large group with a great track record. Consensys The Diligence team is another team that values powerful fuzzing and recently came out with a product. To me, this signals that they not only understand security, but they understand trying to scale security throughout all of Web3. You can tell when a group cares when they make tooling & educational material that makes your life better instead of hoarding it all for themselves. fuzzer-as-a-service They additionally have tooling (similar to Trail of Bits) if you want to go the extra mile. formal verification You can see a , including Aragon, RocketPool, and Fei. list of Consensys Diligence audits here SpearbitDAO is a decentralized network of security experts that shakes the game up. Spearbit Unlike traditional auditing firms, which employ teams of full-time security researchers, Spearbit sources top talent from everywhere in the Web3 ecosystem to assemble the best possible team. Now you might be thinking, “wait, wouldn’t the quality vary if they have different auditors on different projects?”- however, this hasn’t stopped them from consistently being one of the best in the business. SpearbitDAO proves the decentralization ethos works, as many top auditors and researchers go solo — so periodically combining them into one group makes them all the better! You can see a list of , including SudoSwap, LooksRare, and ArtGobblers. SpearbitDAO audits here Dedaub A lesser-known group, I’ve only seen the team ship amazing reports, and it was a little confusing to me why so few people know about them. Dedaub They are another team that ships more than , with coding libraries and helpful alpha on social media. just security audits As an ex-Chainlink engineer myself (ex-DevRel technically), I’ve witnessed the good this team can do on an audit. You can see a list of projects , including Chainlink, Liquity, and Blur. they’ve worked with Trust is a solo auditor consistently at the top of the competitive audit leaderboards and has done fantastic work educating all of Web3. I especially wanted to highlight him to say you don’t always need to go with a firm! Solo auditors can often be cheaper, with as much skill or more than a massive firm. Trust He has , consistently gives , and has made a massive impact in keeping Web3 safe by himself! an auditor course beautiful write-ups I had the pleasure of interviewing him, and he gave me all the tips and tricks one would need to move forward and be a successful security engineer in Web3. https://www.youtube.com/watch?v=VRK2rLFPU0o&embedable=true You can see a list of including The Graph and Vagabond. Trust audits here, More I wanted to keep the list short because the algorithm likes it like that, but here are some more firms and solo auditors that do a fantastic job. Let me know if you think I’m missing any, and I’ll do an assessment. Firms Sigma Prime MixBytes WatchPug Halborn Code4rena Sherlock Runtime Verification Certora Paladin Dedaub Solo Pashov 0x52 obront.eth Romanboehr cccz Akshay Srivastav Kaden.eth Also published . here

Top 7 Smart Contract Auditors to Check For Your Smart Contract

Information is the foundation of good decision-making. Cryptocurrency innovates at the speed of light. New protocols are constantly coming to market, promising to solve some of mankind's greatest financial troubles. While their intentions might be good, the result is a cluttered, noisy environment that promotes FOMO & makes it nearly impossible to make sound decisions. In order to succeed in the wild, volatile, & often opaque world of cryptocurrency it is necessary to quiet the noise & hone in on real signals. The best way to do that is by building out your own Crypto ToolKit. Quick Notes on building a Crypto ToolKit: -) Do not use every single tool (unless you’re a crypto savant) -) Review each resource/tool individually (5–10 min per resource) -) Select only the ones that appeal most to your specific preferences As you might already be aware, the crypto-verse is highly fragmented in the sense that there are many different chains & protocols. Given that not all chains & protocols are interoperable (yet), all of the tools listed provided below are will be as general & multi-purpose as possible. Without further ado, Let's dive in: 📊 Market Data 📊 The starting point of almost every person’s crypto journey, Market Data providers are listing sites that aggregate all open financial digital asset data. All of the fundamental economic elements, Price, Volume, Circulating supply, Orderbooks, market dominance, historic data, & everything else. 1) Token Terminal - https://tokenterminal.com/ 2) Messari - https://messari.io/ 3) Crypto Slate - https://cryptoslate.com/coins/ 4) CoinGlass - https://www.coinglass.com/ Coin Market Cap -** 5) https://coinmarketcap.com/ - 6) Coin Gecko https://www.coingecko.com/ 7) Coin Metrics - https://coinmetrics.io/ 8) Coinlib - https://coinlib.io/ 9) Crypto Compare - https://www.cryptocompare.com/ 10) CoinCap - https://coincap.io/ - 11) CoinRanking https://coinranking.com/ 12) Coin360 — https://coin360.com/ — 13) Bitgur https://bitgur.com/ — 14) Nomics https://nomics.com/ - 15) CryptoWatch https://cryptowat.ch/ 16) BraveNewCoin — https://bravenewcoin.com/ 17) LiveCoinWatch — https://www.livecoinwatch.com/ 18) MultiCoinCharts - https://www.multicoincharts.com/home/ 19) Nansen - https://www.nansen.ai/ 20) CoinPaprika - https://coinpaprika.com/ 21) CoinAlpha - https://coinalpha.app/ 22) CoinScope - https://www.coinscope.co/ 23) DropsTabs - https://dropstab.com/ 24) CryptoView - https://www.cryptoview.com/ 25) CoinCarp - https://www.coincarp.com/ 26) Mytokencap - https://www.mytokencap.com/ 27) CoinCodex — https://coincodex.com/ — 28) CoinLobster https://coinlobster.com/ 💱 DEFI Dashboard & Aggregators💱 Decentralized finance is an incredibly broad term that includes a wide range of applications that vary based on functionality & intended purpose. While the majority of current DEFI activity happens across 4 blockchains (Ethereum, Binance Smart Chain, Polygon & Solana) there are so many up & coming alternative platforms such as Optimism & Arbitrum that have been garnering attention that for the sake of brevity I will only list the few products that I am personally familiar with. 1) Dapp Radar — https://dappradar.com/defi 2) DEFI Llama — https://defillama.com/ 3) DEFI Prime — https://defiprime.com/ 4) DEFI Pulse — https://www.defipulse.com/ 5) YieldWatch - https://www.yieldwatch.net/ 6) ZapperFI - https://zapper.xyz/ 7) Zerion - https://zerion.io/ 8) InstaDapp - https://instadapp.io/ 9) Frontier - https://www.frontier.xyz/ 10) Apebored - https://apeboard.finance/ 11) Debank - https://debank.com/ - 12) APYvision https://app.apy.vision/ - 13) Plasma Finance https://plasma.finance/ - 14) Farm Army https://farm.army/ - 15) DEFISaver https://defisaver.com/ - 16) Gnosis Safe https://gnosis-safe.io/ - 17) DefiYield https://defiyield.app/ 18) Coin98 - https://coin98.com/ 19) AstroTools - https://astrotools.io/ 20) MultiFarm - https://www.multifarm.fi/ 21) OctoFi - https://octo.fi/ 22) Parallel - https://parallel.fi/ 23) Exponential - https://exponential.fi/ 24) WalletDefi - https://walletdefi.app/ 25) DEFImarketCap - https://defimarketcap.io/ 26) QuantifyCrypto - https://quantifycrypto.com/ 📰 News 📰 Crypto is becoming all the more politicized as time goes on. An absurd amount of crypto/DEFI news sites pop up constantly & push their own agendas. The best way to source news (in any industry) is by having a few reliable individual outlets & cross-referencing information across them all. 1) CoinDesk - https://www.coindesk.com/ 2) Coin Telegraph - https://cointelegraph.com/ 3) Bitcoin Magazine - https://bitcoinmagazine.com/ 4) The Cryptonomist - https://en.cryptonomist.ch/ 5) Be In Crypto - https://beincrypto.com/ 6) CoinGape - https://coingape.com/ 7) CryptoSlate - https://cryptoslate.com/ 8) Crypto Briefing - https://cryptobriefing.com/ 9) CryptoDaily - https://cryptodaily.co.uk/ 10) Crypto Potato - https://cryptopotato.com/ 11) BraveNewCoin - https://bravenewcoin.com/ 12) Coin Journal - https://coinjournal.net/ 13) Coin Speaker - https://www.coinspeaker.com/ 14) CoinCu - https://news.coincu.com/ 15) Bitcoinist - https://bitcoinist.com/ 16) CryptoPanic - https://cryptopanic.com/ 17) Crypto News - https://cryptonews.com/ 18) U Today - https://u.today/ 19) CoinGraph - https://www.coingraph.news/ - 20) Decrypt https://decrypt.co/ - 21) Blockworks https://blockworks.co/ - 22) CryptoCapitalNews https://cryptocapitalnews.com/ — 23) Protos https://protos.com/ 👛 Wallets 👛 Wallets are the foundation for getting involved & staying in crypto. Wallets are exactly what they sound like, places to securely store/view your crypto asset holdings. Wallets typically come in 2 flavors, Chain-specific & Chain-agnostic. Chain-specific wallets are tied to a single blockchain platform (i.e ETH/BNB). These will only be able to store their native chain tokens, but allow the users to interact with on-chain assets/applications. Whereas chain-agnostic wallets might allow their users to store crypto assets from any blockchain, but that is the limit of their capabilities as they are usually single-purpose only (storage) 1) MetaMask - https://metamask.io/ 2) MEW - https://www.myetherwallet.com/ 3) Dynamic - https://www.dynamic.xyz/ 4) XDEFI - https://www.xdefi.io/ 5) Enkryptic - https://www.enkrypt.com/ 6) Argent - https://www.argent.xyz/ 7) Dopamine - https://dopamineapp.com/ 8) TrustWallet - https://trustwallet.com/ 9) Eidoo - https://eidoo.app/ 10) Dapppocket - https://www.dapppocket.io/ 11) Atomic Wallet - https://atomicwallet.io/ 12) Bread Wallet - https://brd.com/ 13) Guarda - https://guarda.com/ 14) Exodus - https://www.exodus.com/ 15) ZenGo - https://zengo.com/ 16) Coinomi - https://www.coinomi.com/en/ 17) Luno - https://www.luno.com/en-US 18) Ambire - https://www.ambire.com/ 19) Jaxx - https://jaxx.io/ 20) Edge - https://edge.app/ 21) Freewallet - https://freewallet.org/ 22) Coinbase Wallet - https://www.coinbase.com/wallet 23) Coin Wallet - https://coin.space/ 24) Ballet Wallet - https://www.ballet.com/coins/ 25) Unstoppable - https://unstoppable.money/ 26) Brave Wallet - https://brave.com/wallet/ 27) BitPay - https://bitpay.com/wallet/ 28) Crypto.com - https://crypto.com/us/defi-wallet 🔎 Explorers 🔍 Explorers are software tools that allow users to inspect the activity that has happened/is happening on-chain. Explorers are typically built-to-blockchain, meaning every chain needs its own explorer. Given the girth of data these tools access, explorers tend to be multi-purpose tools (i.e. data providers/ analytics dashboards/compliance). 1) Ethscan - https://etherscan.io/ 2) Bitquery - https://explorer.bitquery.io/ 3) Blockchair - https://blockchair.com/ 4) Tokenview - https://tokenview.io/ 5) Blockcypher - https://www.blockcypher.com/ 6) GetBlock - https://getblock.io/explorers/ 7) ViewBlock - https://viewblock.io/ - 8) BreadCrumbs https://www.breadcrumbs.app/ 9) Beaconchain - https://beaconcha.in/ 10) Blockstream - https://blockstream.info/ 11) Ethplorer - https://ethplorer.io/ 12) OXT - https://oxt.me/ 13) Xscan - https://xscan.io/ 14) Sochain - https://sochain.com/ 15) OkLink - https://www.oklink.com/en 16) Pingpub - https://ping.pub/ ⛓ On-Chain Data ⛓ On-chain data tools are closely related to explorers in the sense that they allow users to inspect the activity that has happened / is happening on-chain. The main difference between the On-chain Data tools & Explorers is the UI & granularity of data they provide.*The main difference between On-Chain data providers & traditional market data is the absence of information that is external to any blockchain. 1) Glassnode - https://glassnode.com/ 2) Dune Analytics - https://dune.com/home 3) IntoTheBlock - https://www.intotheblock.com/ - 4) Mempool https://mempool.space/ 5) Artemis - https://www.artemis.xyz/ - 6) Parsiq https://www.parsiq.net/ 🌉 Bridges 🌉 Within the context of cryptocurrency, a bridge is a software tool or protocol that allows otherwise non-compatible blockchains a method to transfer digital assets between one another. 1) MultiChain - https://multichain.org/ 2) CrossChain Bridge - https://www.crosschainbridge.org/ 3) Celer C Bridge - https://cbridge.celer.network/1/56/USDC 4) Synapse - https://synapseprotocol.com/ 5) Connext - https://bridge.connext.network/USDC-from-ethereum-to-binance 6) Relay - https://www.relaychain.com/ 7) Symbiosis - https://symbiosis.finance/ 8) Umbria - https://umbria.network/ 9) EverBridge - https://www.everrise.com/everbridge/ 10) Bungee - https://www.bungee.exchange/ 11) Portal Bridge - https://www.portalbridge.com/#/transfer 12) Nomad - https://www.nomad.xyz/ 13) Hop - https://hop.exchange/ 14) PolyBridge - https://bridge.poly.network/ 15) SolarBeam - https://app.solarbeam.io/bridge 16) Orbitchain - https://orbitchain.io/about 💹 DEXes 💹 Decentralized Exchanges are the new financial trading paradigm. Generally free from traditional regulatory scrutiny, DEXs are places to buy, sell, swap & provide liquidity for crypto assets. 1) UniSwap - https://uniswap.org/ 2) 1inch - https://app.1inch.io/ 3) DexTools - https://www.dextools.io/app/en 4) DexGuru - https://dex.guru/ 5) GeckoTerminal - https://www.geckoterminal.com/ 6) PancakeSwap - https://pancakeswap.finance/ 7) TraderJoe - https://traderjoexyz.com/avalanche 8) Arken - https://swap.arken.finance/ 9) Flooz - https://flooz.trade/trade 10) Balancer - https://balancer.fi/ 11) Bancor - https://home.bancor.network/ 12) Airswap - https://www.airswap.io/#/ - 13) Sushiswap https://www.sushi.com/ 14) Paraswap - https://www.paraswap.io/ 15) Jupiter - https://jup.ag/ 16) ThorChain - https://thorchain.org/ 17) WooFi - https://fi.woo.org/ 18) DYDX - https://trade.dydx.exchange/ - 19) Slingshot https://app.slingshot.finance/swap/ETH 20) Apex Exchange - https://www.apex.exchange/ 21) Osmosis - https://app.osmosis.zone/ 22) Curve - https://curve.fi/#/ethereum/swap 23) Tokenlon - https://tokenlon.im/instant 24) Swapz — https://www.swapz.app/ 📅 Calendars & Event Schedules 📅 Keeping up with the Kardashians is much easier than keeping up with your favorite crypto protocol; the question then becomes HOW do you plan to manage the onslaught on events? While there is no easy answer, using a Crypto Calander will definitely help: 1) CoinMarketCal - https://coinmarketcal.com/en/ 2) CoinDar - https://coindar.org/ 3) CoinsCalendar - https://coinscalendar.com/ 4) CryptoTotem - https://cryptototem.com/ico-calendar/ 5) CoinCarp events - https://www.coincarp.com/events/ 6) VestLabs - https://vestlab.io/calendar 🪂 Airdrops 🪂 The most popular tool for distribution in the entire industry, airdrops are incentives that are offered/provided at the earlier stages of a project’s development to help bootstrap it’s alpha community members. 1) Earnifi - https://earni.fi/ 2) airdropsio - https://airdrops.io/ 3) AirDropAlert - https://airdropalert.com/ 4) AirdropsLive - https://airdrops.live/ 5) AirdropBob - https://www.airdropbob.com/ 6) AirDropAddict - https://airdropaddict.com/ 7) CoinAirDrops - https://coinairdrops.com/ 8) ICOdrops - https://icodrops.com/ 💸 Grants 💸 Grants are a necessary component to helping startups & innovators get their ideas off the ground. In the world of crypto & blockchain grants are usually offered & deployed on a chain/case-specific basis. In order to be properly up to date on grant opportunities it is best to be actively involved in individual projects and/or blockchains. 1) Blockchain Grants - https://www.blockchaingrants.org/ 2) GitCoin - https://gitcoin.co/grants/ 3) Consensys - https://consensys.net/grants/ — 4) Concoridum https://concordium.com/grants/ 5) Web3 grants - https://web3grants.net/ 6) Web3Foundation - https://web3.foundation/grants/ 7) Ramp Rate - https://ramprate.com/blockchain-grant-opportunities/ - 8) Unigrants https://www.unigrants.org/ 9) Aave grants - https://aavegrants.org/ 10) Near grants - https://near.org/ecosystem/get-funding/ 11) Eth Foundation - https://esp.ethereum.foundation/ 12) Zcash grants - https://grants.zfnd.org/ 13) Alchemy Dev grants - https://www.alchemy.com/developer-grant-program — 14) dydx grants https://www.dydxgrants.com/ 15) Solana grants — https://solana.org/grants 16) Gate grants - https://www.gate.io/grants 17) Cryptoneur - https://www.cryptoneur.xyz/en/web3-grants 🛡 Audits 🛡 Audits are used to assess the quality/security of a protocol. When considering a protocol to use, it is nearly impossible to understand all of the associated risk factors, even for professionals. It is crucial that every serious project employs some form of audit for every individual piece of software. 1) Certik - https://www.certik.com/ 2) Consensys Dilligence - https://consensys.net/diligence/ 3) Hacken - https://hacken.io/services/smart-contract-security-audit/ 4) Open Zepplin - https://www.openzeppelin.com/security-audits 5) Trail of Bits - https://www.trailofbits.com/ 6) Slowmist - https://www.slowmist.com/ 7) Solidified - https://solidified.io/ 8) Chain Security - https://chainsecurity.com/smart-contract-audit-reports/ 9) PeckShield - https://peckshield.com/#home 10) Halborn - https://halborn.com/ 11) Quantstamp - https://quantstamp.com/ 12) Solidity Finance - https://solidity.finance/ - 13) Immune Bytes https://www.immunebytes.com/ 14) NumenCyber - https://www.numencyber.com/ 🌊😎 Cool & Honorable Mentions 😎🌊 There are always exotic instruments & services being built to help make sense of the wild world of crypto; some of these are difficult to classify but still deserve attention for serving their own unique & useful purpose(s). 1) Fiat Leak - https://fiatleak.com/ 2) Everest - https://everest.link/ 3) Revoke.cash - https://revoke.cash/ 4) CryptoQuant - https://cryptoquant.com/asset/btc/summary - 5) CryptoFees https://cryptofees.info/ - 6) Hashrate Index https://data.hashrateindex.com/asic-index-data — 7) LunarCrush https://lunarcrush.com/home — 8) Santiment https://santiment.net/ 9) Gas Fee Calculator - https://www.cryptoneur.xyz/en/gas-fees-calculator This list is by no means exhaustive, there are thousands of other tools/resources out there. Odds are, you do not even need 1/10 of those on this list; so my recommendation is don’t waste time wishing for better tools — learn how to masterfully use a few key ones provided above. If you went through the entire list, you might have noticed that there are no CEFI (centralized financial) tools on this list. This was done on purpose, given the madness that transpired with centralized exchanges/service providers throughout 2022. If you would like me to add any specific resource that might be beneficial to others, just drop a comment below or send me a DM on Twitter. Otherwise; I hope you find these tools helpful in building your knowledge & financial freedom. Thank you so much for reading! 🥂🚀 See you in the next Bull Market 🚀🥂 Also published here.

Halborn

halborn.com

-- employees

Since n.d.

COMPANY RANKING

HALBORN

EVERGREEN INDEX #4867

Halborn WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

Halborn

halborn.com

-- employees

Since n.d.

COMPANY RANKING

HALBORN

EVERGREEN INDEX #4867

RELATED COMPANIESRANK

STORIES ABOUT HALBORN

Halborn WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!