ETHGlobal · Jul 9, 2026

In this talk, Andrej Bencic, co-founder and CEO of Tenderly, makes the case that the next decade of crypto requires shifting focus from building the rails to operating them safely. He opens with a story of a routine protocol upgrade where tests passed, the audit was clean, governance approved, and the time lock executed normally, yet within four minutes of mainnet deployment an asset valued at $2,200 dropped to $0, triggering cascading liquidations and nearly $2 million in bad debt. The smart contracts behaved exactly as intended. The failure wasn't in the code, but in everything around it. Andrej argues that the industry has hyperfocused on getting protocols from idea to mainnet while neglecting operational risk in production with live state and live dependencies. He uses the analogy that the map is not the territory: smart contracts are the map, but mainnet is the territory full of traffic, congestion, and population density. He outlines four categories of risk that must be managed together. Process risk covers operational mishaps like signing transactions, treasury management, and deployment workflows, where he cites that process exploits now outnumber code exploits by 6 to 7 times. Dependency risk covers second, third, and fourth order failures across the interconnected web of DeFi protocols. Market risk recognizes that DeFi lacks trading hours, circuit breakers, and human checkpoints that traditional finance relies on, so multi day unwinds can happen in an instant. Code risk remains essential as ever but needs to test onchain dynamics, not just isolated sandboxes. He closes by introducing the concept of blockchain operations and pointing to simulation against live state as the unique advantage blockchain offers, comparing it to pilots in flight simulators or banks running stress tests. 00:00 Introduction 00:11 A Routine Upgrade Gone Wrong 01:04 $2 Million in Bad Debt in Four Minutes 01:33 The Smart Contracts Behaved as Intended 01:51 Andrej's Background at Tenderly 02:38 Why None of the Checks Triggered 03:03 Hyperfocusing on Reaching Mainnet 03:26 The Work Doesn't Stop at Launch 04:10 The Map Is Not the Territory 05:38 Smart Contracts Are Half the Equation 06:38 Crypto Becoming Finance Itself 07:11 Risk Management as the Next Decade's Discipline 07:47 Four Categories of Risk 08:20 Process Risk and Operational Mishaps 09:37 Six to Seven Times More Process Exploits Than Code Exploits 09:59 Dependency Risk and the DeFi Lego Tradeoff 11:18 Knowing the Blast Radius of Dependencies 11:53 Market Risk Without Circuit Breakers 13:19 Modeling Comfort with Exposure 13:36 Code Risk Remains Essential 14:23 Testing Onchain Dynamics, Not Just Isolated Sandboxes 14:52 Correct at Launch Doesn't Mean Correct at Scale 15:22 Frameworks From Traditional Finance 15:49 Simulation Against Live State as the Tying Piece 16:23 No Undo Buttons on Blockchain 16:48 Pilots, Banks, and Stress Testing 17:43 Blockchain Operations as a Category 18:16 Closing: Operating at the Level Global Attention Requires _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ *ETHConf 2026* ETHConf is a 3 day event for founders, industry leaders, and builders who are excited about the possibilities of building on top of Ethereum. Connect with 2,000+ top innovators in crypto, finance, technology, and policy at our inaugural three-day event packed with showcases, demos, partnerships, and conversations shaping the future of the global economy. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ *Follow ETHConf* X: https://x.com/ethconf Website: https://ethconf.com _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🎟️ Get your early bird tickets for ETHConf 2027: https://ethconf.com/2027#tickets 🎤 View the full ETHConf 2026 Speaker Schedule: https://ethconf.com/schedule _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHGlobal · Jul 9, 2026

In this fireside chat, Camila Russo from The Defiant sits down with Hayden Adams, founder of Uniswap, to discuss the current state of DeFi, the recent Unification proposal, regulation, RWAs, perps, and what's next for Uniswap V4. Hayden frames the current moment as a pivotal one where DeFi is being integrated into mainstream finance through Coinbase, Robinhood, Deel, and traditional fintechs, while simultaneously facing a wave of security exploits driven by smarter AI tooling like Claude finding vulnerabilities in poorly written contracts. He sleeps well at night because Uniswap V3 underwent nine consecutive audits with a $15 million bounty, processes over a trillion dollars per year, and has never been exploited. He argues AI tooling will ultimately harden DeFi contracts to a far greater extent, and the projects that survive will be the ones that removed off chain dependencies and single points of failure. Hayden discusses the Unification proposal approved in December that consolidated foundation work into Labs and gradually rolled out fee switches, including a recent all time high single day burn of 186,000 UNI (about $500K) with V4 fees still not yet activated. He acknowledges the UNI token price disconnect from the burn but attributes this to general crypto market correlation, expecting fundamental value to assert itself over time. On regulation, Hayden explains how the shift from the Gensler era of regulation by enforcement has already done much of the work by removing the chilling effect, and the BRCA software developer protections are the key piece he'd want enshrined in any market structure bill. He outlines how Uniswap fits into RWAs and tokenization through the internet analogy (existing assets going onchain plus crypto native assets), differentiates Uniswap's neutral spot infrastructure approach from Hyperliquid's exchange as a product approach, and previews V4 hooks being built internally to optimize for stablecoins (where Uniswap has overtaken Curve as the dominant venue), yield bearing assets, RWAs, and volatile assets, plus a focus on issuer side tools and developer API integrations. 00:00 Introduction 00:08 DeFi at a Pivotal Mainstream Adoption Moment 01:35 Why Exploits Are Surging: AI Tooling Finds Bugs 02:22 Test in Production Mentality Doesn't Work Anymore 02:46 How V3 Survived: Nine Audits and a $15M Bounty 03:31 Launching a New Version Like Launching a Rocket 03:53 DeFi Ultimately Enables Safer Applications 04:24 Off Twitter, Adoption Is the Best It's Ever Been 05:15 DeFi Will Come Out Stronger From This Stress Test 06:29 The Unification Proposal Six Months In 07:38 Gradual Fee Switch Rollout and Sensitivity Testing 08:18 All Time High Single Day Burn of 186,000 UNI 09:00 The UNI Token Price Disconnect From Burn 10:39 Fundamental Value Will Assert Itself Over Time 10:56 Regulation: From Gensler Era to New Posture 11:53 The Chilling Effect That Held Back Integration 13:14 BRCA and Software Developer _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ *ETHConf 2026* ETHConf is a 3 day event for founders, industry leaders, and builders who are excited about the possibilities of building on top of Ethereum. Connect with 2,000+ top innovators in crypto, finance, technology, and policy at our inaugural three-day event packed with showcases, demos, partnerships, and conversations shaping the future of the global economy. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ *Follow ETHConf* X: https://x.com/ethconf Website: https://ethconf.com _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🎟️ Get your early bird tickets for ETHConf 2027: https://ethconf.com/2027#tickets 🎤 View the full ETHConf 2026 Speaker Schedule: https://ethconf.com/schedule _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHGlobal · Jul 9, 2026

In this talk, Professor Ari Juels, co-director of the Initiative for Cryptocurrencies and Contracts (IC3), presents a lightning tour of a newly released 150 page survey on the intersection of crypto and AI, written with a long roster of co-authors. He opens by arguing that crypto and AI are not natural bedfellows. Crypto is hard: strictly programmatic and unforgiving, as shown by the Kelp DAO attack where a single poisoned message let the North Korean Lazarus group steal hundreds of millions. AI is soft: frontier models are unpredictable and error prone, like ChatGPT confidently saying raspberry has two Rs or drawing a rabbit with too many ears. Yet they can serve as middleware for each other, with Worldcoin (now World) as a proof point where crypto identity becomes essential to distinguish humans from bots in an AI saturated world. Ari walks through Crypto x AI applications where AI enhances crypto. He shows how a typical parametric flight insurance smart contract, while elegant, suffers from moral hazard and can't document actual harms, which is why AXA's Fizzy product was discontinued. By adding an LLM enhanced oracle, the same contract can ingest receipts and assess damages like real world insurance while preserving privacy. He covers AI powered investment funds, which IC3 calls coinouts (collective investment algorithms), and presents the fundamental coinout bind: either the strategy is transparent and gets front run publicly, or it's opaque and gets front run privately through covert channels. In the other direction (AI x Crypto), he addresses DePIN GPU networks with healthy skepticism, noting industry proofs of concept don't report communication or compute costs, and the largest decentralized trained model has only 40 billion parameters versus frontier models' trillions. He shows the same TEE plus LLM oracle pattern enabling confidential lending, whistleblower credentials, anonymous reviewer proofs, and code audits without revealing source. He closes with a warning about rogue agents (UAAS, unstoppable autonomous agents) that could use stablecoins to rent servers, establish censorship resistant command and control, conceal their code, and even rent humans through services like rentahuman.ai to influence the physical world. 00:00 Introduction 00:11 IC3 and the New Crypto AI Survey 00:37 Why Crypto and AI Are Not Natural Bedfellows 01:00 Crypto Is Hard: Programmatic and Unforgiving 01:52 The Kelp DAO Attack as Proof of Unforgivingness 02:41 Security Tools the Crypto Industry Has Pioneered 03:11 AI Is Soft: Unpredictable and Error Prone 04:24 World as a Proof Point of the Intersection 05:39 The Middleware Model for AI and Crypto 06:04 Crypto x AI: How AI Enhances Crypto 06:29 The Flight Insurance Smart Contract Example 07:07 Why Parametric Insurance Has Limitations 07:58 AXA's Fizzy Product and Why It Was Discontinued 07:58 Enhancing Oracles with LLMs 09:19 Hard Crypto Meets Soft AI Productively 10:02 AI Powered Investment Funds 10:36 Why First Wave AI Funds Were Mostly Hype 11:05 Coinouts: Collective Investment Algorithms 11:39 The Coinout Bind: Transparency vs Opacity 12:27 AI x Crypto: How Crypto Enhances AI 12:59 DePIN and Decentralized GPU Networks 13:50 Why DePIN Training Claims Need More Evidence 14:33 Confidential Lending with TEEs and LLMs 15:59 Other Use Cases: Whistleblowers and Anonymous Reviews 16:16 Pyred: Code Credentials Without Revealing Source 16:38 The Warning About Rogue Agents 17:05 How Stablecoins Enable Persistent Autonomous Agents 17:34 Renting Humans with Crypto 17:59 Other Topics Covered in the Survey 18:25 Five Myths and Misconceptions Debunked 18:57 Where to Read the Paper 18:57 Closing _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ *ETHConf 2026* ETHConf is a 3 day event for founders, industry leaders, and builders who are excited about the possibilities of building on top of Ethereum. Connect with 2,000+ top innovators in crypto, finance, technology, and policy at our inaugural three-day event packed with showcases, demos, partnerships, and conversations shaping the future of the global economy. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ *Follow ETHConf* X: https://x.com/ethconf Website: https://ethconf.com _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🎟️ Get your early bird tickets for ETHConf 2027: https://ethconf.com/2027#tickets 🎤 View the full ETHConf 2026 Speaker Schedule: https://ethconf.com/schedule _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHGlobal · Jul 9, 2026

In this talk, Odysseas Lamtzidis from Phylax presents preventative safety infrastructure for DeFi as the answer to how institutional capital can trust onchain systems without forcing the space to centralize. He frames the core security problem: in traditional finance you can always revert to an Excel sheet, but in crypto instant settlement means mistakes are irrevocable. The same property that excites investors for capital efficiency is what scares them. He defines a hack as the divergence between business logic and protocol logic, since the software is the asset and the asset is the software, where a single line of code determining ownership of billions in USDC can be rewritten by an attacker. Current security measures like monitoring are reactive, co-signers introduce centralization, and contagion turns isolated failures into systemic events. Odysseas walks through how the Kelp bridge incident cascaded into $300 million in bad debt at Aave (which had no part in the original hack), and how regulators are noticing the pattern of small groups making urgent discretionary decisions, slow responses, and accountability gaps like Circle being sued whether they freeze assets or don't. He argues for controls that are visible, automatic, and preventative, removing the human element. Phylax has built an integrated circuit breaker and evidence layer operating at the network level (block builder, validator, or sequencer) where applications register policies via smart contracts, and a sidecar drops any transaction that violates those rules. The system is transparent (rules known in advance), auditable (every decision creates records), and rules based with no human in the loop. He notes Phylax is already in production with Linea, having dropped over 4,000 transactions and protecting users from nearly $50,000 in losses. He closes by outlining a counterparty risk framework covering scope, boundaries, who can modify policies, operational integrity, incident response, and code delta from audits, urging the industry to self regulate through efforts like the Seal Framework or face violent unilateral regulation. 00:00 Introduction 00:11 Why Security Is Different in DeFi 00:37 Instant Settlement Makes Mistakes Irrevocable 01:13 Defining a Hack: Business Logic vs Protocol Logic 01:36 The Software Is the Asset 02:06 Current Security: Monitoring and Co-Signers 02:26 The Cascading Threat of Contagion 02:51 Formal Verification and Runtime Enforcement 03:38 The Question Runtime Enforcement Asks 03:54 Case Study: Kelp Bridge and Aave Contagion 05:03 Aggressive Caps and Regression to Centralization 05:25 What Regulators Are Seeing 05:53 The Circle Freezing Problem 06:30 Visible, Automatic, Preventative Controls 06:58 How Phylax Works at the Network Level 07:31 The Sidecar Architecture 08:00 Three Attributes: Transparent, Auditable, Rules Based 08:21 Defining Unacceptable Economic Outcomes 09:20 Composing Deterministic and Probabilistic Signals 09:55 In Production with Linea 10:16 4,000 Transactions Dropped, $50K Protected 10:48 Counterparty Risk Is the Hidden Problem 11:19 Why Discretionary Controls Already Exist as the NYSE 11:44 Why Institutions Pulled Back After Kelp 12:09 Three Steps: Define, Enforce, Record Risk 12:41 A New Counterparty Framework 13:28 The Seal Framework and Self Regulation 14:14 Closing: Decentralization and Investor Protection Together _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ *ETHConf 2026* ETHConf is a 3 day event for founders, industry leaders, and builders who are excited about the possibilities of building on top of Ethereum. Connect with 2,000+ top innovators in crypto, finance, technology, and policy at our inaugural three-day event packed with showcases, demos, partnerships, and conversations shaping the future of the global economy. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ *Follow ETHConf* X: https://x.com/ethconf Website: https://ethconf.com _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🎟️ Get your early bird tickets for ETHConf 2027: https://ethconf.com/2027#tickets 🎤 View the full ETHConf 2026 Speaker Schedule: https://ethconf.com/schedule _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Jan Gorzny

ETHGlobal · May 9, 2026

In this talk, Jan Gorzny from Zircuit presents Zircuit Finance, a new platform launched at Denver that brings institutional-grade investment yields on-chain in a fully permissionless way. He frames the two core problems blocking DeFi mass adoption: inaccessibility (accreditation requirements, high capital minimums, lockup periods) and risk (smart contract exploits, complex looping strategies, yield unpredictability). His thesis is that if Web3 truly wants to "bank the unbanked," it needs to offer all the good aspects of institutional finance — professional capital management, predictable yields, proven track records — without the gatekeeping. Zircuit Finance solves this by letting anyone deposit USDC or USDT with no KYC, no minimum deposit, and no lockup, then lending those funds to regulated asset managers like Monarch, Fortis, and Fidelity who run strategies like delta-neutral quant funds. The platform targets 8-11% APY with 0% management fees and a 20% performance fee, keeping the smart contract architecture deliberately simple to minimize security risk. It's live on Ethereum and Base as a LayerZero OApp with multi-chain expansion planned, and also integrates DeFi protocols like Aave and Morpho to augment yields and provide flexibility alongside the institutional strategies. 00:00 Introduction 00:29 Pragmatic DeFi: Sensible and Realistic 01:49 Two Problems with High-Yield DeFi: Risk and Inaccessibility 03:21 Banking the Unbanked Means Matching Bank-Level Features 04:10 Bringing Institutional Capital On-Chain 04:50 Why Institutional Yields Are Currently Inaccessible 05:59 Professional Strategies and Higher, Safer Yields 06:56 DeFi Risk: Exploits, Contagion, and Horror Stories 07:42 De-Risking Through Regulated Partners 08:43 Growing the Pie Together 09:02 Solution: Permissionless Access + Predictable Yields 09:51 Introducing Zircuit Finance 10:27 Target: 8-11% on USDC/USDT, Zero Management Fees 10:49 Multi-Chain via LayerZero 11:10 Partners: Monarch, Fortis, Fidelity, Aave, Morpho 11:48 How It Works: Deposit, Lend, Earn 12:10 Key Takeaway: Predictable DeFi Is Safer DeFi 13:13 Closing _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇫🇷 *Pragma Cannes 2026* Pragma Cannes 2026 was held on April 2nd at the JW Marriott Hotel in Cannes, France and was an in-person summit for builders and leaders in the web3 ecosystem. Watch the full Pragma Cannes 2026 YouTube Playlist here: https://www.youtube.com/playlist?list=PLXzKMXK2aHh5OnsJ95gz7HoI1tLUj3kZr ETHGlobal's Pragma series takes place in cities around the world, and is designed to be a different kind of event. Pragma is a one-stage conference with founders-only on stage, bringing together a small group of curated attendees and speakers to discuss the future of web3 and reflect on the past. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow Jan Gorzny X: https://x.com/jgorzny ✅ Follow Zircuit X: https://x.com/Zircuit ✅ Follow Kartik Talwar X: https://x.com/TheRealKartik ✅ Follow ETHGlobal X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/@UCfF9ZO8Ug4xk_AJd4aeT5HA _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Are you interested in Ethereum development and entrepreneurship? 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city

ETHGlobal · May 9, 2026

In this talk, Misha Putiatin, co-founder of Symbiotic, lays out the four critical problems that must be solved to bring trillions of dollars of traditional finance on-chain in a composable, DeFi-native way rather than as simple database receipts. He argues that after 18 years of building infrastructure, blockchains are no longer bandwidth-bound, but the industry lacks the financial primitives needed for institutional adoption: private credit, smart contract risk coverage, standardized reporting, and RWA liquidity. Misha details Symbiotic's role as a collateral market platform addressing each problem: partnering with Cap Protocol for private credit and financial guarantees (already at $220M+ in delegations), working with Nexus Mutual on second-loss coverage for DeFi and RWA protocols, helping Hive build on-chain reporting with real-time liquidation triggers and automated audits, and building an instant liquidity solution that pools redemption flow across all tokenized platforms to solve the chicken-and-egg problem of illiquid RWAs with 90-100 day redemption windows. He emphasizes that the "native way" — composable, liquidatable, self-custodied assets with DeFi rails — is the only path that truly leverages what crypto has built, with instant liquidity and Nexus coverage both launching early Q2. 00:00 Introduction 00:10 18 Years of Building Infrastructure 02:26 Traditional Finance Is Finally Interested 03:43 Why Institutions Matter: They Have the Money 04:44 Two Options: Database Receipts vs DeFi-Native Composability 06:30 Symbiotic's Four-Problem Framework 06:59 Problem 1: Private Credit and Financial Guarantees 08:48 Problem 2: Smart Contract Risk Coverage with Nexus Mutual 10:42 Capital Efficiency and the Insurance Gap 12:12 Problem 3: Standardized On-Chain Reporting with Hive 13:22 Actionable Reporting: Liquidation Triggers and Automated Audits 14:03 Problem 4: RWA Liquidity — The Biggest Blocker 15:37 Current Solutions: Half-Yield Buffers and Platform Funds 17:00 Symbiotic's Approach: Pooled Cross-Platform Liquidity 18:01 Launch Timeline: Instant Liquidity and Nexus in Q2 18:41 Closing _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇫🇷 *Pragma Cannes 2026* Pragma Cannes 2026 was held on April 2nd at the JW Marriott Hotel in Cannes, France and was an in-person summit for builders and leaders in the web3 ecosystem. Watch the full Pragma Cannes 2026 YouTube Playlist here: https://www.youtube.com/playlist?list=PLXzKMXK2aHh5OnsJ95gz7HoI1tLUj3kZr ETHGlobal's Pragma series takes place in cities around the world, and is designed to be a different kind of event. Pragma is a one-stage conference with founders-only on stage, bringing together a small group of curated attendees and speakers to discuss the future of web3 and reflect on the past. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow Misha Putiatin X: https://x.com/Psalom ✅ Follow Symbiotic X: https://x.com/Symbioticfi ✅ Follow Kartik Talwar X: https://x.com/TheRealKartik ✅ Follow ETHGlobal X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/@UCfF9ZO8Ug4xk_AJd4aeT5HA _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Are you interested in Ethereum development and entrepreneurship? 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city

ETHGlobal · Nov 9, 2025

Preetam Rao (QuillAudits co-founder) explores how adversarial AI agents and reinforcement learning can harden Web3 systems. After noting today’s sprawling attack surface (cross-chain bridges, modular stacks) and the limits of static/symbolic analysis and fuzzing, he argues that LLM-powered agents introduce non-determinism and new prompt-hacking risks (memory erasure, fund transfers). He proposes self-learning, RL-based “red-team” agents that model attacker behavior, search contract/agent state spaces, and optimize against invariants (win conditions). Using an RL framework (states → actions → rewards), his team’s “Red-Team Copilot” learned re-entrancy, then discovered a new timestamp bug without being explicitly trained. He closes by positioning adversarial agents as a continuous, proactive layer alongside audits—applied both to smart contracts and LLM agents (via their “QuillGuard” guardrails). 00:02 Opening & background (QuillAudits, 1,500+ protocol engagements) 01:37 Constant in Web3: weekly hacks/scams despite growth 02:13 Trust deficits: founders/devs/third parties; broader attack surface (bridges, AMMs, lending) 03:15 Why current tooling falls short: static, symbolic, fuzzing limits 05:20 LLM agents are attackable: prompt injection, memory wipe, nondeterminism 06:54 Real incident: agent manipulated to transfer funds (~$100k) 08:04 Monitoring/AI “auditors” trained on past bugs struggle with zero-days 09:41 Enter adversarial RL: self-learning attacker agents 10:42 MDP framing: state, action, reward; define invariants as win conditions 11:48 Applying to contracts & agents; reward signals and learning loops 13:05 Red-Team Copilot demo concept: access-control & multi-tx paths 14:14 Result: RL trained on re-entrancy later found a timestamp vulnerability unprompted 14:52 Extending to AI agents: QuillGuard for guardrails 15:25 Call to action & research paper; future of self-learning adversaries _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇮🇳 *Pragma New Delhi* Pragma New Delhi 2025 was held on September 25th at the JW Marriott Hotel in Aerocity New Delhi and was an in-person summit for builders and leaders in the web3 ecosystem. Watch the full Pragma New Delhi YouTube Playlist here: ETHGlobal's Pragma series takes place in cities around the world, and is designed to be a different kind of event. Pragma is a one-stage conference with founders-only on stage, bringing together a small group of curated attendees and speakers to discuss the future of web3 and reflect on the past. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow Preetam Rao X: https://x.com/raopreetam_ ✅ Follow QuillAudits X: https://x.com/QuillAudits_AI ✅ Follow ETHGlobal X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/@UCfF9ZO8Ug4xk_AJd4aeT5HA _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Are you interested in Ethereum development and entrepreneurship? 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHGlobal · Nov 9, 2025

Shashank, founder of SolidityScan, explains how AI and automation are transforming smart contract security. With over 14 years in cybersecurity (credited with finding bugs in Apple, Google, and Facebook), he highlights the staggering scale of Web3 hacks—over $5B in 2024, with 55% caused by contract vulnerabilities—and argues that manual audits alone can’t scale. He demonstrates how AI-powered automation reduces false positives and identifies nuanced access-control issues. Using the 2022 ShadowFi token hack as a case study, Shashank shows how traditional rule-based scanners struggle with logic-based bugs, while AI understands contextual security patterns. He details how SolidityScan’s multi-agent AI model, trained on 100K+ audit reports, mimics an “AI auditor” in developers’ CI/CD pipelines—reducing false positives by 82% and enabling real-time vulnerability detection before deployment. 00:02 Introduction & context: AI + blockchain security 00:27 Shashank’s background in cybersecurity (Apple, Google, Facebook) 00:59 Web3 security challenges: hacks & financial losses 01:28 Birth of SolidityScan: AI-powered contract analysis 02:00 Why automation is needed: billions lost, manual audits can’t scale 02:45 CI/CD security comparison to Web2 03:09 Rule-based scanning limitations → need for AI 03:27 Case study: ShadowFi token hack (Sept 2022) 04:10 Transaction analysis: token burn exploit explained 05:21 Access control vulnerabilities as #1 cause 05:44 How missing modifiers caused the exploit 06:08 Why rule-based systems fail to catch custom RBAC patterns 06:59 Example: false positives in static scanning 07:32 Using AI to understand code context & access logic 08:05 Results: 82% reduction in false positives 08:57 Multi-agent AI: master/slave setup & specialized agents 09:30 Dataset: 100K+ audit reports, 1M+ vulnerabilities 10:01 How the AI auditor works in developer pipelines 10:25 Audience Q&A: context limits, hallucinations, AI-guided algorithms 11:50 Future plans: formal verification & AI-generated fuzzing tests 12:10 Static analysis today, dynamic verification next 12:43 Closing remarks _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇮🇳 *Pragma New Delhi* Pragma New Delhi 2025 was held on September 25th at the JW Marriott Hotel in Aerocity New Delhi and was an in-person summit for builders and leaders in the web3 ecosystem. Watch the full Pragma New Delhi YouTube Playlist here: ETHGlobal's Pragma series takes place in cities around the world, and is designed to be a different kind of event. Pragma is a one-stage conference with founders-only on stage, bringing together a small group of curated attendees and speakers to discuss the future of web3 and reflect on the past. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow Shashank X: https://x.com/cyberboyIndia ✅ Follow Credshields X: https://x.com/credshields ✅ Follow ETHGlobal X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/@UCfF9ZO8Ug4xk_AJd4aeT5HA _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Are you interested in Ethereum development and entrepreneurship? 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHSofia · Oct 9, 2025

Pashov Audit Group are one of the most popular and respected Web3 Security Companies in the blockchain space. They are trusted by top projects such as Uniswap, Aave, LayerZero, 1inch, Ethena, Sushi, pump.fun, Radiant, Gains Network, TapiocaDAO and many others. In this talk Krum Pashov talks about Finding the Best Security Audit. Speaker: Krum Pashov, Founder and CEO, Pashov Audit Group Chapters: 00:00 - Intro 01:25 - Common Approach to Choosing an Audit Provider 02:01 - Qualities of a Good Audit: Timeline, Budget, and Communication 03:07 - Importance of High-Quality Findings in an Audit 04:09 - Team Transparency: Ensuring the Auditors Have Experience in Your Protocol 05:24 - Auditor’s Experience: Why It Matters for Security Audits 06:28 - Incentives: Ensuring Auditors Are Motivated to Do a Thorough Job 08:22 - Different Audit Options: Solo Audits, Team Audits, and Security Contests 15:23 - Client Requests for Partial Audits: How Pashov Audit Group Handles Marketing-Driven Audits This video was recorded during the ETHSofia Conference and Hackathon - October 17-19, 2024. ETHSofia is THE crypto tech conference in Sofia, Bulgaria, bringing together enthusiasts, developers, researchers, and academia focused on Ethereum and other L1 chains. The conference is supported by the Ethereum Foundation and made possible by the generous contributions of industry leaders. For more information, please visit: https://www.ethsofia.com/ 🌍Join the community: X (Twitter): https://x.com/ETHSofiaBG Telegram: https://t.me/+_i70pgfFHjBkMjZk LinkedIn: https://www.linkedin.com/company/ethsofia/ #KrumPashov #PashovAuditGroup #SmartContractAudits #Web3Audits #BlockchainAudits #ETHSofia #ETHConference #EthereumConference #ethereumcrommunity

Loi Luu

ETHGlobal · Oct 9, 2025

Caliber Founder and Kyber Network creator Loi Luu delivers a masterclass on building sustainable DeFi systems at Pragma Taipei 2025. Drawing from his experience launching multiple successful protocols, Luu outlines practical frameworks for creating open financial infrastructure that lasts beyond market cycles. The talk provides actionable dos/don'ts covering transparency, security design, incentive alignment, and avoiding common pitfalls in token launches and prediction markets. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇹🇼 *Pragma Taipei* Pragma Taipei 2025 was held on April 3rd at POPOP in Taipei, Taiwan and was an in-person summit for builders and leaders in the web3 ecosystem. Watch the full Pragma Taipei YouTube Playlist here: ETHGlobal's Pragma series takes place in cities around the world, and is designed to be a different kind of event. Pragma is a one-stage conference with founders-only on stage, bringing together a small group of curated attendees and speakers to discuss the future of web3 and reflect on the past. 00:04 - Introduction to Caliber's venture studio approach 01:29 - OptimX case study: Bridging Bitcoin/DeFi liquidity 02:43 - Core principles for open financial infrastructure 05:08 - Analyzing current market pitfalls and hype cycles 07:32 - Caliber's framework for protocol sustainability 09:19 - Security best practices from Kyber's experience 11:10 - Designing incentive structures that last 13:34 - Leveraging trends without compromising integrity 14:39 - Capital efficiency innovations in modern DeFi 16:32 - Solving prediction market resolution challenges 17:55 - Token launchpad design lessons 19:49 - Caliber's builder-first philosophy _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow Loi Luu X: https://x.com/loi_luu ✅ Follow Caliber X: https://x.com/CaliberBuild ✅ Follow Kartik Talwar X: https://x.com/TheRealKartik ✅ Follow ETHGlobal X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/@UCfF9ZO8Ug4xk_AJd4aeT5HA _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Are you interested in Ethereum development and entrepreneurship? 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHGlobal · Oct 9, 2025

Join Francis Li from Hashkey Chain in this ETHGlobal Taipei 2025 workshop on building compliant Web3 applications. Learn how to integrate KYC/AML checks into DeFi projects while maintaining decentralization, using multi-signature wallets, smart contract audits, and dynamic contract monitoring to enhance user trust. Discover Hashkey’s permissionless DEX and their on-chain identity verification system, which balances compliance with privacy. Francis also covers oracle solutions (Supra, Chainlink, API3) and bridges for cross-chain interoperability. Perfect for developers looking to build secure, regulatory-friendly dApps without sacrificing Web3 principles. Code examples and testnet tools provided. 00:00 – Introduction: Why Compliance Matters in Web3 00:49 – Challenges: Developer Innovation vs. User Trust 01:25 – Traditional Web3 App Development Process 02:06 – Risks: Private Key Exploits & Centralized Control 02:47 – Compliant Development: Transferring Contract Ownership 03:31 – Smart Contract Audits & Dynamic Monitoring 04:14 – Demo: Permissionless DEX on Hashkey Chain 04:53 – Adding KYC to DeFi Swaps (Identity Checks) 05:36 – On-Chain KYC: Privacy-Preserving Data Flow 06:59 – Testnet Demo: Integrating KYC Tools 09:03 – Mainnet KYC Process (ID, Bills, Bank Verification) 10:47 – Oracle Solutions: Supra, Chainlink, API3 11:46 – Q&A: KYC Validation & Compliance Workflow 12:34 – Closing: Workshop Resources & Booth Support _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇹🇼 *ETHGlobal Taipei* This workshop is specifically for ETHGlobal Taipei, a 3-day hackathon held April 4-6 2025, that brought together the most skilled web3 developers, designers and product builders from all around the globe for a weekend-long adventure to advance the Ethereum ecosystem! _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow HashKey Chain X: https://x.com/HashKeyHSK ✅ *Follow ETHGlobal* X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/c/ETHGlobal _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _Are you interested in Ethereum development and entrepreneurship?_ 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Sergey Nazarov, Kartik Talwar

ETHGlobal · Oct 9, 2025

In this fireside chat, Sergey Nazarov, Co-founder of Chainlink, and Kartik Talwar, Co-founder of ETHGlobal, discuss the evolution and institutional adoption of DeFi, focusing on the expanding role of oracles, cross-chain interoperability, and compliance. Sergey explains how oracles have evolved from simple data feeds to encompass cross-chain bridges, identity, and AI oracles, culminating in the Chainlink Runtime Environment (CRE) and CCIP (Cross-Chain Interoperability Protocol). He emphasizes the necessity of robust, secure, and compliant infrastructure for institutional capital to enter DeFi, highlighting Chainlink's dominance in securing DeFi protocols and enabling programmable token transfers. The conversation covers the importance of liquidity, the integration of stablecoins and CBDCs, the abstraction of user experience, and the critical mass of composable building blocks on Ethereum. Sergey offers advice for institutions entering DeFi: prioritize security, compliance, and cross-chain connectivity, and leverage established standards and infrastructure like Chainlink. He predicts rapid growth in on-chain assets, especially RWAs, as institutional adoption accelerates. 00:00 Introduction 01:30 Evolution of Oracles and Smart Contracts 04:22 Oracles’ Role in DeFi and Cross-Chain Bridges 06:43 CCIP and Institutional Requirements 10:17 CCIP for DeFi and Institutional Use Cases 13:20 Chainlink’s Security and Market Share 15:16 Stablecoin Chains and DeFi Liquidity 17:28 Fragmentation vs. Decentralization 20:55 User Experience and Stablecoin Abstraction 23:19 Real-World Institutional Integrations 25:06 Ethereum’s Ecosystem and Composability 27:30 Institutional Mindset Shifts 32:08 Best Practices for Institutional Adoption 34:54 Importance of Cross-Chain Connectivity 36:51 Predictions for On-Chain Asset Growth 38:10 Conclusion _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 🇺🇸 *Pragma New York* Pragma New York 2025 was held on August 14th at Vesper Events in Brooklyn, New York and was an in-person summit for builders and leaders in the web3 ecosystem. Watch the full Pragma New York YouTube Playlist here: https://www.youtube.com/playlist?list=PLXzKMXK2aHh5TRLdUXjnhUVfdbBtu6z2j ETHGlobal's Pragma series takes place in cities around the world, and is designed to be a different kind of event. Pragma is a one-stage conference with founders-only on stage, bringing together a small group of curated attendees and speakers to discuss the future of web3 and reflect on the past. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ✅ Follow Sergey Nazarov X: https://x.com/SergeyNazarov ✅ Follow Chainlink X: https://x.com/Chainlink ✅ Follow Kartik Talwar X: https://x.com/TheRealKartik ✅ Follow ETHGlobal X: https://x.com/ETHGlobal​ Warpcast: https://warpcast.com/ethglobal Website: https://ethglobal.com YouTube: https://www.youtube.com/@UCfF9ZO8Ug4xk_AJd4aeT5HA _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Are you interested in Ethereum development and entrepreneurship? 👉 Sign up for the next ETHGlobal event: https://ethglobal.com/events 🎁 Get exclusive access and perks with ETHGlobal Plus! https://ethglobal.com/plus 📣 Want us to throw an event in your city? Tell us where! https://ethglobal.com/city _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

ETHTokyo · Sep 3, 2024

This talk will be diving into what economic exploits are and how most of them are executed in the Ethereum ecosystem. The video features Varun Doshi, the lead engineer at ChainRisk Labs, discussing the importance of blockchain security and differentiating between technical and economic security within the blockchain space. He begins by engaging the audience with a prompt about 'Blockchain security' to highlight common associations with vector attacks. Varun then introduces his firm, ChainRisk Labs, which specializes in both technical and economic audits for various big-name partners in the industry. He presents data showing Ethereum's dominance in Total Value Locked (TVL) and its correlation with the highest number of exploits due to its liquidity. Varun emphasizes that economic audits are crucial as they simulate real-world scenarios under stress to identify potential economic risks that can affect decentralized finance (DeFi) protocols. He explains that economic audits consider market conditions, ripple effects across protocols, risk parameters, incentive structures, inter-protocol dependencies, and governance weaknesses. Varun points out that most exploits are economically driven rather than technical and highlights the scarcity of firms specializing in economic security despite a significant market opportunity. Varun contrasts technical audits with economic audits by explaining that while technical issues involve code loopholes and atomic operations without initial investment from attackers, economic issues often involve valid code but can be exploited through complex processes requiring significant initial investment from attackers. Lastly, he notes that