Exploit Insecure Crypto Wallet (Presentation)
Demonstrates vulnerability discovery and exploitation techniques targeting insecure cryptocurrency software wallets.
Summary
Security researcher Peiyu Wang delivers an analysis of client-side vulnerability classes in cryptocurrency wallet applications in the Blockchain Village [00:04, 00:12]. Wang focuses on implementation and architectural flaws in desktop, web, and mobile wallet software rather than underlying blockchain consensus mechanisms [05:42].
The presentation explores session management flaws, demonstrating how missing cookie security attributes (such as HttpOnly and Secure flags) leave session tokens and credentials vulnerable to cross-site scripting (XSS) attacks [11:51]. Wang examines insecure Electron framework configurations in desktop wallets, illustrating how enabling nodeIntegration or utilizing deprecated Chromium runtimes allows malicious RPC payloads or web content to achieve full remote code execution on the host system [23:47].
(AI summary — Gemini Flash)
Related talks
Blockchain Village·31 min
Peiyu Wang
A live walkthrough demonstrating vulnerability identification, reverse engineering, and exploitation of flawed crypto wallet applications.
Blockchain Village·52 min
Ron Stoner
Covers architectural security patterns, Tendermint consensus auditing, and threat vectors across the Cosmos blockchain ecosystem.
Blockchain Village·54 min
Peter Kacherginsky
Keynote presentation by Peter Kacherginsky exploring blockchain security challenges, threats, and emerging decentralized technology.