Layla Zulfa
During Devconnect Buenos Aires, the Ethereum Foundation and Secureum TrustX convened a pivotal gathering of Ethereum security practitioners for Trillion Dollar Security Day, a focused event designed to explore the intricate requirements for securely supporting a future trillion-dollar Ethereum economy. This high-stakes summit brought together approximately eighty leading experts from across the vast Ethereum Security Ecosystem, representing critical domains such as Infrastructure, Interoperability, Layer 1 & 2, Onchain, Offchain, Privacy, and Wallets. The overarching goal was to conduct a comprehensive assessment of the current security landscape, collaboratively surface shared challenges that transcend individual layers, and identify concrete, actionable next steps to bolster security across the entire technology stack. The valuable discussions and outputs generated from this concentrated event are set to significantly contribute to the Ethereum Foundation’s ongoing and ambitious One Trillion Dollar Security (1TS) initiative, underscoring a proactive commitment to safeguarding the network’s burgeoning value and user base.
The Imperative: Why a Trillion Dollar Security Day?
The very notion of a "Trillion Dollar Security Day" is a testament to Ethereum’s remarkable growth and its aspirational trajectory. Over the past few years, Ethereum has evolved from a nascent blockchain experiment into a global, decentralized computing platform, underpinning a vast digital economy that already commands hundreds of billions of dollars in market capitalization and supports a decentralized finance (DeFi) ecosystem with tens of billions in Total Value Locked (TVL). As this ecosystem continues its exponential expansion, pushing towards the trillion-dollar valuation implicit in the event’s title, the stakes for security grow exponentially. A single, catastrophic security failure could have far-reaching economic consequences, erode user trust, and invite severe regulatory scrutiny, potentially stifling innovation and adoption.
The motivation behind dedicating an entire day to this topic stemmed from a recognition that while Ethereum’s core protocol benefits from rigorous development and a vibrant community of security researchers, the broader ecosystem — encompassing myriad applications, infrastructure providers, and user-facing tools — presents a complex and ever-expanding attack surface. The event was meticulously designed to foster focused, in-person discussions within specific technological layers. By bringing together practitioners who work on similar parts of the stack, the organizers aimed to facilitate an honest assessment of current security postures, share the often-unspoken operational realities faced by builders and defenders, and collectively identify near-term priorities for immediate action. The subsequent synthesis of outcomes from these specialized sessions was crucial for highlighting systemic patterns, interdependencies, and critical vulnerabilities that span the broader Ethereum ecosystem, providing a holistic view of its security health.
Devconnect Buenos Aires: A Conducive Setting for Collaboration
The Trillion Dollar Security Day was strategically held within the broader context of Devconnect Buenos Aires, a week-long series of independent, in-depth Ethereum events tailored for builders, researchers, and community members. Devconnect is known for providing a more intimate and focused environment than larger, general conferences, making it an ideal venue for intensive, specialized workshops and discussions. The atmosphere at Devconnect encourages deep technical exchange and direct collaboration, precisely the conditions required for a security summit of this magnitude.
Participants, comprising leading security architects, developers, auditors, and researchers, split into carefully curated breakout sessions. These groups were organized by layer, allowing for granular discussions on what security measures are currently effective, what existing approaches are falling short, and where concentrated effort is most urgently needed. This layered approach ensured that discussions were highly relevant and actionable, avoiding generic observations in favor of concrete, domain-specific insights. The structured format, moving from focused discussions to cross-layer synthesis, ensured that both specialized challenges and systemic issues were addressed, laying the groundwork for a more robust and unified security strategy.
Cross-Layer Observations: Unifying Themes in a Diverse Ecosystem
Despite the diverse nature of the seven distinct layers examined, participants consistently surfaced several recurring themes that highlighted systemic challenges across the entire Ethereum ecosystem. These included:
- Coordination Gaps: Insufficient collaboration and information flow between different layers, leading to potential blind spots and delayed responses to emerging threats.
- Opaque User Security: A lack of clarity and transparency for end-users regarding the security assumptions and risks associated with various tools and protocols.
- Tooling and Visibility Lag: The current state of security tooling and comprehensive visibility into the ecosystem’s security posture often lags behind the rapid pace of innovation and the increasing financial risks involved.
- Unexplicit Trust Assumptions: Users are frequently unaware of the underlying trust assumptions embedded within many protocols, particularly in areas like interoperability, leading to misjudgments about risk.
- UX and Infrastructure Constraints: User experience challenges and limitations in underlying infrastructure often hinder the adoption of more secure practices, especially concerning privacy.
- Invisible Attack Surfaces: Critical, often overlooked attack vectors residing in traditional "Web2" components or off-chain infrastructure that are deeply integrated with "Web3" applications.
- Misaligned Incentives: Economic models that do not adequately reward the development and maintenance of essential security public goods.
A condensed view of the key issues identified and the immediate next steps proposed during these intensive sessions is captured below:
| Layer | Key Issues | Identified Immediate Next Steps |
|---|---|---|
| Layer 1 & 2 | Quantum risk, weak L1/L2 coordination, cloud dependence, compressed testing | Expand EPF onboarding, create L2 liaisons, improve EIP versioning & ownership |
| Wallets | Blind signing, paywalled security, low coordination | Form an Open Signing Alliance, neutral/on-chain EIP-7730 registry, wallet dashboards |
| Onchain | "Audited ≠ secure", weak IR, OpSec failures | Fund OSS security tooling, create DeFi security visibility, promote SEAL |
| Interop | Unsafe trust assumptions, UX favors speed over safety | Interop trust ratings, clearer disclosures, improve canonical bridge UX |
| Infrastructure | Frontend hacks, RPC centralization, DNS SPOFs | Verifiable frontends, infra transparency dashboards, light-client wallets |
| Offchain | Misaligned incentives, Web2 attack-surface blind spots | Security frameworks, certifications, public-goods staffing models |
| Privacy | UX and infrastructure constraints, RPC-based tracking | Light-client data over P2P RPC, private wallet UX, ZK-capable hardware, regulatory engagement |
Key Themes by Layer: Deep Dive into Specific Challenges and Solutions
The in-depth discussions within each layer revealed nuanced challenges and specific pathways for improvement, emphasizing the complexity of securing a multi-faceted ecosystem. Full presentations detailing these findings are available for public review.
Layer 1 & 2: Bridging the Coordination Gap
Ethereum’s foundational security is robust, built upon a multiclient architecture, a specification-driven development process, and a conservative Layer 1 change mechanism that minimizes risks. However, practitioners highlighted several growing concerns. The looming threat of quantum computing, while still theoretical for immediate practical exploits, necessitates long-term research and foresight. More immediate issues include limited coordination between Layer 1 and Layer 2 developers, which can lead to friction in EIP (Ethereum Improvement Proposal) review processes and potential vulnerabilities in bridging solutions. The increasing reliance on centralized cloud infrastructure for running nodes and services presents a single point of failure risk, while compressed testing timelines for new protocol upgrades can inadvertently introduce unforeseen bugs.
Key challenges specifically cited included limited community and Layer 2 participation in the crucial All Core Devs calls, which are vital for protocol evolution. Client teams often lack the capacity to thoroughly review the ever-evolving landscape of EIPs early enough in their lifecycle. Furthermore, persistent concerns around the resilience and security of L1-L2 bridging mechanisms and RPC (Remote Procedure Call) infrastructure continue to be a focus.
Proposed next steps emphasized expanding the Ethereum Protocol Fellowship (EPF) to nurture new talent and integrate them into core development. Creating clearer L2 liaison roles would streamline communication. Improving EIP versioning and establishing explicit ownership expectations for proposals would enhance accountability. Finally, strengthening moderation and accessibility within coordination forums aims to foster more inclusive and effective dialogue.
Wallets: Empowering User Security and Transparency
Progress has been made in wallet security, particularly with advancements in signing standards like EIP-7730 and improved wallet discoverability. These efforts aim to make user interactions safer and more intuitive. Yet, significant hurdles remain. The prevalence of "blind signing" in many hardware wallets, where users approve transactions without seeing clear, human-readable details of what they are signing, poses a critical risk, enabling sophisticated phishing attacks. The concept of "paywalled security," where advanced security features are often only accessible or understood by more technically proficient users, leaves a large segment of the user base vulnerable. Moreover, the competitive nature of the wallet landscape often limits collaboration on shared security initiatives.
Participants underscored that the competitive environment acts as a structural barrier to robust, cross-wallet collaboration. An over-reliance on the Ethereum Foundation to drive all coordination efforts was also identified as unsustainable.
A pivotal proposal emerged for the creation of an "Open Signing Alliance," an industry-wide initiative rooted in Ethereum’s core values of openness, neutrality, and the "walkaway test" (the ability for users to easily switch providers). Additional priorities include establishing the EIP-7730 registry in a neutral or even on-chain context to prevent single points of control, and funding the development of wallet-focused security dashboards to enhance transparency and legitimacy across the ecosystem.
Onchain Security: Beyond the Audit Checklist
Onchain security benefits immensely from a growing global pool of experienced security researchers, the continuous development of powerful new tooling (such as Foundry for smart contract development and testing), and increased awareness of incident response protocols through initiatives like SEAL911. Despite these positives, security is still too often treated as a mere checkbox in the development lifecycle, leading to a dangerous conflation of an "audited" status with genuine "security." An audit provides a snapshot in time, not a guarantee against future exploits or operational failures.
Participants highlighted that the majority of recent financial losses in the DeFi space have stemmed not from novel smart-contract exploits but from fundamental operational security (OpSec) failures and human error. Other critical challenges include the increasing complexity of protocols, which makes comprehensive security analysis more difficult; limited invariant monitoring, which could detect anomalous behavior in real-time; and a general lack of economic audits that assess the financial incentives and game theory within a protocol for potential attack vectors.
Immediate next steps include sustained funding for open-source security tooling, encompassing fuzzers, static analyzers, and dynamic analyzers, which are crucial for automated vulnerability detection. Improved visibility into DeFi security posture, akin to a "L2BEAT-like" platform that transparently tracks security metrics and risks across various protocols, was also proposed. Finally, broader adoption of SEAL (Security Alliance) frameworks and checklists tailored for different contract classes would standardize and elevate security practices.
Interoperability: Demystifying Cross-Chain Trust
Ethereum users enjoy a wide array of interoperability options, facilitating increasingly fast and low-cost user experiences across different blockchains and Layer 2 solutions. However, this convenience often comes at a hidden cost: participants pointed out that many interoperability protocols rely on poorly communicated trust assumptions. This lack of transparency leads users to mistakenly equate "fast and cheap" with "safe," exposing them to unforeseen risks.
Many non-canonical bridges, which are not officially sanctioned or fully decentralized, fail the "walkaway test," meaning users might not be able to easily retrieve their assets if the bridge operator becomes malicious or fails. Furthermore, risk often persists even after assets are bridged, due to the nature of wrapped assets and their downstream dependencies on the bridge’s security.
Proposed actions include developing clear "interop trust ratings" that explicitly detail the underlying trust assumptions and verification models of each bridge. Setting strong expectations for explicit trust disclosures by cross-chain aggregators would empower users to make informed decisions. Improving the speed and reducing the cost of canonical bridges would naturally decrease reliance on potentially unsafe alternatives. A follow-up dedicated interoperability workshop was also suggested to dive deeper into these complex issues.
Privacy: Addressing UX and Infrastructure Barriers
There was broad consensus that privacy is not merely an optional feature but an increasingly normal and necessary component of Ethereum’s future, especially as institutional adoption grows. Encouraging progress was noted in zero-knowledge (ZK) research and its potential applications for privacy-preserving transactions. Nevertheless, significant barriers persist, primarily centered around user experience (UX), prohibitive costs, and underlying infrastructure limitations.
Key challenges include the widespread use of RPC-based tracking, which can compromise user privacy by revealing transaction patterns to centralized providers. Difficulties surrounding private data storage and recovery, alongside a notable lack of builders focused specifically on private wallet UX, hinder adoption. The absence of hardware support for privacy-preserving keys also represents a significant technological constraint.
Suggested next steps focus on shifting towards greater use of light-client data over P2P RPC to reduce reliance on centralized endpoints and enhance privacy. Investment in intuitive private wallet UX is crucial for broader adoption. Research into ZK-capable hardware signers could provide a secure foundation for private transactions. Finally, proactive engagement with regulators is necessary to seek clearer guidance and foster a supportive environment for permissionless privacy technologies.
Infrastructure & Offchain Security: The Invisible Attack Surface
Beyond the smart contract layer, critical but often underappreciated risks lie in infrastructure and off-chain components. Frontend compromises, where malicious code is injected into a website’s user interface, DNS (Domain Name System) hijacks, RPC centralization, and software supply-chain attacks were repeatedly cited as significant vulnerabilities. Participants also highlighted a concerning lack of sustainable economic alignment for non-profit organizations that provide critical security public goods, making their long-term viability precarious.
Key challenges include a false dichotomy often drawn between "Web2" and "Web3" security, leading to neglect of traditional IT security best practices in the blockchain space. Limited accountability for off-chain failures, which often fall outside the scope of on-chain audits, creates dangerous blind spots. There is also a persistent tendency to prioritize speed and convenience over robust security measures. The practical difficulty of easily running Ethereum nodes over privacy-enhancing networks like Tor was also pointed out as a barrier to censorship resistance and privacy.
Proposed next steps include building verifiable frontend prototypes to ensure the integrity of user interfaces. Increasing transparency around RPC and broader infrastructure health through public dashboards would allow users and developers to make informed choices. Advancing security frameworks and certifications for off-chain services could standardize practices. Crucially, creating structured collaboration models where private companies contribute dedicated time, expertise, and resources to security public goods is essential for sustainable ecosystem-wide security.
Broader Implications and Future Outlook
The insights gleaned from Trillion Dollar Security Day carry profound implications for Ethereum’s trajectory. As the network matures and its economic footprint expands, the scale of potential damage from security breaches grows exponentially. Unaddressed vulnerabilities could lead to systemic financial crises within the ecosystem, shatter user trust, attract severe regulatory oversight that stifles innovation, and ultimately hinder the widespread adoption of decentralized technologies. The proactive, collaborative approach fostered at this event is therefore not merely a best practice, but a critical necessity for the ecosystem’s long-term health and prosperity. It signals a collective commitment to moving beyond reactive incident response towards a culture of proactive risk management and continuous improvement.
The Trillion Dollar Security gathering unequivocally highlighted the immense value of bringing security practitioners together in person. Such face-to-face interactions facilitate a shared understanding of complex issues and accelerate momentum in ways that asynchronous, online coordination often cannot achieve. Focused discussions enabled a rapid alignment on critical security standards, the identification of shared tooling needs, and the development of practical "how-to" guidance for implementation across various layers.
The discussions also underscored the paramount importance of maintaining a continuously updated, shared view of Ethereum’s overall security posture. The ecosystem is dynamic, constantly evolving with new protocols, applications, and attack vectors. Staying ahead of emerging risks demands regular reassessment of what security measures are effective, where existing assumptions no longer hold true, and which areas require renewed attention to truly support a trillion-dollar economy securely.
The actionable insights and collaborative spirit generated in Buenos Aires will continue to inform the Ethereum Foundation’s ambitious One Trillion Dollar Security efforts, working in concert with ongoing initiatives across the broader ecosystem. The near-term focus remains firmly on supporting the execution of identified next steps, enabling the widespread adoption of open and neutral security standards, and continuously strengthening the foundational elements required to keep Ethereum secure, resilient, and trustworthy at an unprecedented scale. This collaborative endeavor, championed by dedicated individuals such as @vdWijden, @barnabas, @zachobront, @ethzed, @mattaereal, @ncsgy, and @ThewizardofPOS, and expertly hosted by @0xRajeev and @fredrik0x, is a testament to the community’s unwavering commitment to securing the decentralized future.
