We’re used to security happening behind closed doors. But our inner nerd loves transparency - and heedless of Gandalf’s warning we want to study the arts of the enemy.

When attacks happen in real time on a public ledger, and response is community driven in discord and on twitter, you get a decentralized security scene. Call it the bazaar to Web2’s cathedral.

More eyes, more voices, more noise. Is that better?

Whether you agree or not, it's certainly better pod material. And isn’t that what really counts?

MEV Boost, NFT fails etc, all these hacks were enabled by underlying technical vulnerabilities some of which can appear to the (un)trained eye very similar to classic vulnerabilities we see in web2. Are they or are we being flippant, only one way to find out. 

So this is the one where we really dig into the technical details of the most well known vulnerabilities in web2 and web3 and decide whether there are actually any similarities at all.

Several years after Web3 broke out, there’s a noticeable dearth of patagonia vests still hanging around the crypto scene. Where are the Web3 unicorns? Does blockchain have a space in the enterprise? Do consumers care?

Underneath this question is a philosophical discussion on disintermediation, decentralization, and what it means for a technology to be successful on the internet.Start exercising those brain wrinkles with a different parallel - is open source a success?

Building a commercial enterprise on providing open source software is famously hard. Despite that the internet runs on software that thousands of nerds maintain, for little or no commercial purpose. Maybe this whole time the internet was all about the love ❤️

Normally when data goes out the door, it's gone - you can’t put the cat back in the bag, the horse back in the stable, or any other animal-metaphor back in its proper place.

But crypto isn’t normal. When an NFT goes out the door, what if you could hack it back?

In late 2023,  NFTTrader had a re-entrancy vulnerability that led to the loss of a lot of valuable assets. But that wasn’t the end of the story. Intrepid community members used the same re-entrancy to take their assets back. (Re)-enter the matrix with us to learn how.

Show links:

So was it a calculated crime of opportunity that was destined to happen or were they just cleverer than the front runners who are the real bad guys here...

25 million dollars gone in 12 seconds. That’s more DPS than even the most hardcore RPG fan could hope for. How is it possible to lose so much so quickly?

Scratch the surface, and you’ll find a whole ecosystem built to maximize the value of blockspace by ordering transactions before they hit the chain. Everything’s for sale - welcome to the mempool, keep your head above the water.

Who Am I? We can’t figure that out for you, but we can sound off about who you are on the web.

Security is increasingly about identity, and  blockchain brings that to its full realization. You are your keys. What else could you be?

Wherein we briefly remember that we’re security people, and talk about one of the biggest heists of the Web3 age - Axie Infinity.

While we had our heads in the clouds, another hype cycle kicked up. It’s name is AI, and it threatens to change the internet faster than Web3.

Why is that? Does it have to be that way? Find out if our predictions have aged like milk or wine.

Web1, Web2, Web3. Why does it matter? In the digital age code is power, so whoever controls the runtime controls the world.

The platform age is ending. Web3 isn’t a slow database, its an alternate runtime for the web. Join us on the precipice as we break down the history of the internet and the political economy of the web.