<\/p>\n
Polygon security chief Mudit Gupta has urged Web 3.0 companies to hire traditional security experts to stamp out easily avoidable hacks, arguing that perfect code and cryptography are not enough.<\/strong><\/p>\n Speaking to Cointelegraph, Gupta noted that Several of the recent hacks in the cryptocurrency space were ultimately the result of Web 2.0 security vulnerabilities, <\/strong>such as private key management and phishing attacks to obtain login data, rather than poorly designed Blockchain technology.<\/p>\n Also, Gupta stressed that getting a certified security audit of a smart contract without adopting standard Web 2.0 cybersecurity practices is not enough to protect a protocol and user wallets from attack:<\/strong><\/p>\n “I’ve been pushing at least every big company to get a dedicated security person who really knows that key management is important.”<\/p><\/blockquote>\n “You have API keys that are used for decades and decades. So you have to follow the best practices and proper procedures. To keep these keys safe. There should be a proper audit trail and proper risk management around these things. But , as we have seen, these cryptocurrency companies ignore all of this,”<\/strong> he added.<\/p>\n Although blockchains are typically decentralized on the backend, “users interact with [las aplicaciones] through a centralized website”, so you always have to “take into account” the application of traditional cybersecurity measures around factors such as the domain name system (DNS), web hosting and security of the email, Gupta said.<\/p>\n Gupta also emphasized the importance of private key management, citing the $600 million Ronin Bridge hack and the $100 million Horizon Bridge hack as classic examples of the need to tighten private key security procedures:<\/strong><\/p>\n “Those hacks had nothing to do with the security of the blockchain, the code was fine. The cryptography was fine, everything was fine. Except the key management, which was not. The private keys […] they weren’t stored securely, and the way the architecture worked was that if the keys were compromised, the entire protocol was compromised.”<\/p><\/blockquote>\n Gupta suggested that the current sentiment from blockchain and Web 3.0 companies is that if “you fall for a phishing attack, it’s your problem,” but he argued that “if we want mass adoption,” Web 3.0 companies have to take more responsibility rather than do the bare minimum.<\/strong><\/p>\n “For us […] we do not want only the minimum security that distances responsibility. We want our product to be really safe for users to use. […] so we think about what traps they can fall into and try to protect users against them.”<\/p><\/blockquote>\n Polygon is an interoperability and scaling framework for building Ethereum-compatible blockchains, allowing developers to build easy-to-use and scalable decentralized applications.<\/p>\n With a team of 10 security experts currently employed at Polygon, Mudit wants all Web 3.0 companies to take the same approach.<\/strong><\/p>\n After the hack of $190 million Nomad Bridge in August,<\/strong> Cryptocurrency hacks have surpassed the $2 billion mark, according to blockchain analytics firm Chainalysis.<\/p>\n Clarification:<\/span> The information and\/or opinions expressed in this article do not necessarily represent the views or editorial line of Cointelegraph. The information set forth herein should not be taken as financial advice or investment recommendation. All investment and commercial movement involve risks and it is the responsibility of each person to do their due research before making an investment decision.<\/span><\/p>\n Keep reading:<\/strong><\/span><\/p>\n<\/div>\n Investments in crypto assets are not regulated. They may not be suitable for retail investors and the full amount invested may be lost. The services or products offered are not aimed at or accessible to investors in Spain.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":" Polygon security chief Mudit Gupta has urged Web 3.0 companies to hire traditional security experts to stamp out easily avoidable hacks, arguing that perfect code and cryptography are not enough. Speaking to Cointelegraph, Gupta noted that Several of the recent hacks in the cryptocurrency space were ultimately the result of Web 2.0 security vulnerabilities, such<\/p>\n","protected":false},"author":63,"featured_media":432330,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3394],"tags":[6204,19403,38591,14877,6299,8008,7328,3962,11829,5632],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/images.cointelegraph.com\/images\/1200_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjItMDkvYTQwOWIyNTctZDAwYy00NTJiLWJkZDEtODM4NmQ2NTIzYzBkLmpwZw==.jpg","_links":{"self":[{"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/posts\/432329"}],"collection":[{"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/users\/63"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/comments?post=432329"}],"version-history":[{"count":0,"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/posts\/432329\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/media\/432330"}],"wp:attachment":[{"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/media?parent=432329"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/categories?post=432329"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bullfrag.com\/wp-json\/wp\/v2\/tags?post=432329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}