Layla Zulfa
During Devconnect Buenos Aires, a pivotal gathering of Ethereum security practitioners convened for Trillion Dollar Security Day, an intensive event co-hosted by the Ethereum Foundation and Secureum TrustX. This focused summit aimed to comprehensively explore the intricate requirements for securely underpinning an Ethereum economy projected to reach a trillion-dollar valuation. The initiative is a direct contribution to the Ethereum Foundation’s ongoing One Trillion Dollar Security (1TS) program, underscoring a proactive commitment to safeguarding the network’s burgeoning ecosystem.
The Genesis of the "Trillion Dollar Security" Imperative
The premise for Trillion Dollar Security Day is rooted in Ethereum’s remarkable growth and its ambition to become the foundational layer for a global, decentralized financial system. As Ethereum’s Total Value Locked (TVL) in DeFi protocols, NFT market capitalization, and enterprise adoption continues to expand, the stakes for security have escalated dramatically. While the current market capitalization of Ethereum and its associated assets fluctuates, the "trillion-dollar economy" benchmark represents a forward-looking vision, acknowledging the immense potential and inherent risks of an increasingly valuable and complex digital landscape. Protecting such an economy necessitates a robust, multi-faceted security posture that anticipates future threats and addresses current vulnerabilities across all layers of the stack. This strategic foresight forms the core of the 1TS initiative, seeking to future-proof Ethereum against sophisticated attacks and systemic failures.
Devconnect Buenos Aires, held from September 8-15, 2023, served as an ideal backdrop for this critical discussion. As a week-long gathering designed to foster deep technical collaboration among Ethereum developers, researchers, and community members, Devconnect provides a unique environment for focused, in-person dialogue that transcends the limitations of asynchronous online communication. The Trillion Dollar Security Day, held as a dedicated sub-event, leveraged this setting to bring together approximately eighty leading security experts. These participants represented a broad cross-section of the Ethereum Security Ecosystem, encompassing vital areas such as Infrastructure, Interoperability, Layer 1 & 2 protocols, Onchain applications, Offchain services, Privacy solutions, and Wallet technologies. This diverse assembly was crucial for a holistic assessment of the current security landscape, facilitating the identification of shared challenges and the formulation of concrete, actionable next steps across the entire technological spectrum.
Methodology: Layered Discussions and Cross-Ecosystem Synthesis
The structure of Trillion Dollar Security Day was meticulously designed to maximize productive engagement. Participants were strategically divided into breakout sessions, each dedicated to a specific layer of the Ethereum stack. This approach allowed practitioners working on similar components to delve into granular discussions about their operational realities, current security posture, and pressing near-term priorities. By fostering an environment of direct collaboration, the event aimed to surface nuanced insights and facilitate consensus-building that might be challenging to achieve in broader forums. Following these specialized sessions, the outcomes were meticulously synthesized to highlight overarching patterns, inter-dependencies, and systemic vulnerabilities that cut across the entire ecosystem. This dual-pronged approach ensured both depth within specific domains and breadth in understanding the interconnected nature of Ethereum’s security challenges.
Key Themes and Identified Imperatives Across the Ethereum Stack
The intensive discussions yielded a comprehensive snapshot of Ethereum’s security landscape, revealing both strengths and significant areas requiring urgent attention. Recurring themes emerged across all layers, emphasizing the need for enhanced coordination, improved tooling, clearer standards, and a more robust user experience that prioritizes safety without compromising accessibility.
1. Layer 1 & 2: Fortifying the Foundation and Bridging Gaps
Ethereum’s foundational security is bolstered by its multi-client architecture, which reduces single points of failure, its specification-driven development, ensuring rigorous design, and a conservative Layer 1 change process that prioritizes stability. However, practitioners highlighted several escalating risks. Quantum risk, while a nascent threat, was discussed as a long-term concern requiring proactive research into quantum-resistant cryptography. Weak L1/L2 coordination was identified as a critical bottleneck, hindering efficient security upgrades and vulnerability responses across the growing rollup ecosystem. The increasing reliance on cloud infrastructure introduces centralization risks and potential supply-chain attack vectors. Furthermore, compressed testing timelines for new features and upgrades can inadvertently introduce vulnerabilities.
- Key Challenges: Limited L2 and community participation in core developer calls, constrained client team capacity for early EIP review, and ongoing concerns regarding L1-L2 bridging and RPC resilience.
- Identified Immediate Next Steps: Expanding the Ethereum Protocol Fellowship (EPF) to foster new talent, establishing clearer L2 liaison roles to improve communication, enhancing EIP versioning and ownership expectations, and strengthening moderation and accessibility within coordination forums. The goal is to ensure a cohesive security strategy as the network scales horizontally.
2. Wallets: Enhancing User Security and Transparency
Significant progress has been made in wallet security, notably with advancements in signing standards like EIP-7730 and improved wallet discoverability. However, the path to truly secure user interaction remains fraught with challenges. The prevalence of blind signing in most hardware wallets was a major concern, as it prevents users from verifying transaction details before approval, making them susceptible to phishing and malicious smart contracts. Paywalled security — where advanced security features are often premium offerings — creates an uneven playing field. A lack of coordinated efforts among wallet providers, often driven by competitive pressures, further exacerbates these issues, with an over-reliance on the Ethereum Foundation to drive collaboration.
- Key Challenges: Blind signing risks, competitive landscape hindering collaboration, and insufficient shared security discussions.
- Identified Immediate Next Steps: The proposal for an Open Signing Alliance, grounded in Ethereum’s core values of openness and neutrality, emerged as a critical solution. Additional priorities include hosting the EIP-7730 registry in a neutral, potentially on-chain context, and funding the development of wallet-focused security dashboards to enhance transparency and legitimacy for users.
3. Onchain Security: Beyond Audits to Robust Operations
The onchain security landscape benefits from a growing cadre of experienced security researchers, sophisticated tooling like Foundry, and improved incident response mechanisms through initiatives such as SEAL911. Yet, a dangerous misconception persists: the conflation of "audited" with "secure." Participants emphasized that most recent losses in the DeFi space have stemmed from operational security (OpSec) failures rather than novel smart-contract exploits. The increasing protocol complexity makes comprehensive auditing and monitoring more challenging. Limited invariant monitoring and a scarcity of economic audits (which assess the financial logic and incentives of a protocol) also contribute to systemic risk.
- Key Challenges: Misconception that "audited" equals "secure," prevalent OpSec failures, increasing protocol complexity, and limited invariant/economic monitoring.
- Identified Immediate Next Steps: Sustained funding for open-source security tooling (e.g., fuzzers, static and dynamic analyzers) is paramount. Creating a "L2BEAT-like" approach for DeFi security visibility would provide much-needed transparency, and broader adoption of SEAL frameworks and checklists for different contract classes would standardize best practices.
4. Interoperability: Demystifying Trust and Risk
The Ethereum ecosystem thrives on a diverse array of interoperability options, offering users increasingly fast and low-cost experiences. However, this convenience often masks underlying security risks. Many interoperability protocols rely on poorly communicated trust assumptions, leading users to mistakenly equate speed and low cost with safety. A significant number of non-canonical bridges, which often offer faster transactions, fail the "walkaway test" — meaning users cannot easily exit or recover funds if the bridge operator becomes malicious or fails. Furthermore, risk frequently persists even after bridging due due to the nature of wrapped assets and their downstream dependencies.
- Key Challenges: Poorly communicated trust assumptions, UX favoring speed over safety, non-canonical bridges failing the "walkaway test," and persistent risk from wrapped assets.
- Identified Immediate Next Steps: Developing interoperability trust ratings that explicitly detail assumptions and verification models is crucial. Setting strong expectations for explicit trust disclosures by cross-chain aggregators would empower users. Improving the speed and cost efficiency of canonical bridges could reduce reliance on riskier alternatives. A follow-up interoperability workshop was also proposed to delve deeper into these complex issues.
5. Privacy: Overcoming UX and Infrastructure Barriers
There was a broad consensus that privacy is evolving from a niche concern to a fundamental and necessary component of Ethereum’s future, with encouraging advancements in zero-knowledge research and institutional interest. Despite this, user experience (UX), cost, and existing infrastructure limitations remain significant impediments to widespread adoption. RPC-based tracking poses a threat to user privacy, as many wallets rely on centralized RPC providers. Difficulties around private data storage and recovery, a lack of dedicated builders focusing on intuitive private wallet UX, and the absence of hardware support for privacy-preserving keys were also highlighted as critical barriers.
- Key Challenges: RPC-based tracking, difficulties in private data storage/recovery, lack of private wallet UX, and absence of ZK-capable hardware support.
- Identified Immediate Next Steps: Greater utilization of light-client data over P2P RPC would decentralize privacy. Investment in private wallet UX development is essential to make privacy accessible. Research into ZK-capable hardware signers could provide a robust security layer, and engaging with regulators to seek clearer guidance for permissionless privacy technologies is vital for legal clarity and innovation.
6. Infrastructure & Offchain Security: Addressing the "Invisible" Attack Surface
The discussions emphasized that significant, yet often underappreciated, risks reside in the infrastructure and offchain components supporting Ethereum. Frontend compromises, DNS hijacks, RPC centralization, and software supply-chain attacks were repeatedly cited as critical vulnerabilities. Participants also highlighted a lack of sustainable economic models for non-profits providing crucial security public goods. The pervasive false separation between "Web2" and "Web3" security practices leads to overlooked attack surfaces. Limited accountability for off-chain failures and the tendency to prioritize speed or convenience over security further compound these risks. The inability to easily run nodes over Tor was also flagged as a concern for decentralization and censorship resistance.
- Key Challenges: Frontend hacks, RPC centralization, DNS Single Points of Failure (SPOFs), software supply-chain attacks, misaligned incentives for public goods, and the false Web2/Web3 security dichotomy.
- Identified Immediate Next Steps: Building verifiable frontend prototypes would enhance user trust. Increasing transparency around RPC and infrastructure health could decentralize reliance. Advancing security frameworks and certifications across the ecosystem would standardize practices. Crucially, creating structured collaboration models where private companies contribute dedicated time and resources to security public goods is essential for long-term sustainability.
Event Reflections and The Path Forward
Feedback from participants was overwhelmingly positive, with the quality of discussion and relevance of topics rated as excellent. The event underscored the invaluable nature of in-person, cross-layer exchange in building shared understanding and momentum. The primary areas for logistical improvement focused on optimizing group sizes and enhancing structured networking opportunities.
Looking ahead, there was strong demand for future work centered on applied security standards, the development of shared tooling, and practical "how-to" guidance for implementation. This reflects a desire to move beyond theoretical discussions to tangible, deployable solutions that can immediately enhance the security posture of the ecosystem.
The Trillion Dollar Security gathering served as a powerful testament to the value of direct collaboration among security practitioners. The focused, face-to-face discussions proved instrumental in accelerating alignment on critical standards, tooling, and practical solutions, achieving breakthroughs that are often elusive through asynchronous coordination alone.
The insights gleaned from Buenos Aires will continue to directly inform the Ethereum Foundation’s One Trillion Dollar Security efforts, working in concert with ongoing security initiatives across the broader ecosystem. The near-term focus remains steadfast on supporting the execution of identified next steps, promoting the widespread adoption of open and neutral security standards, and continuously strengthening the foundational elements necessary to maintain Ethereum’s security at an unprecedented scale. As Ethereum continues its trajectory towards a trillion-dollar economy, these proactive, collaborative security measures are not merely aspirational but absolutely imperative.
With thanks to the security layer champions @vdWijden, @barnabas, @zachobront, @ethzed, @mattaereal, @ncsgy, and @ThewizardofPOS. And @0xRajeev and @fredrik0x for hosting.
