Blockchain Security Series Episode 6: Oliver Hörr (Founder @ Hats Finance) Hosted by Pablo Sabbatella - pablito.eth (Head of Security Research @ Blockfence) Powered by Blockfence Topics discussed: - 01:00 - Your road into crypto & Security - 06:00 - Crypto UX, security and scalability. - 07:00 - How Hats Finance started - 08:30 - The state of the auditing market - 13:45 - How to select which audit competition to participate - 17:30 - Audit firms vs Audit competitions - 21:15 - How security researchers should choose competitions - 25:00 - Fuzzing and formal verification - 28:00 - Bringing audits on-chain: ERC 7512 - 37:30 - Account abstraction - 45:30 - 2 reasons your project is being hacked - 52:00 - Incentives: white hat vs black hat - 58:00 - Inside jobs. Bounties for employees - 01:00:00 - Security of composability - 01:07:00 - ETH Dam - 01:10:00 - Favorite conferences Summary: Oliver Hörr, founder of Hatch Finance, discusses his journey into the crypto and security space. He highlights the importance of security in blockchain adoption and the challenges in the auditing market. Oliver also talks about the ERC for on-chain representation of audits and the potential impact of account abstraction on user experience and security. He also talks about the challenges of selecting auditors and the need for better incentives for security researchers. Oliver highlights the risks of composability in the blockchain space and suggests using incentives to improve security at different layers. He shares his experience at ETHBerlin and emphasizes the importance of attending security conferences to learn and network.
Keywords: Oliver Hörr, Hats Finance, crypto, security, blockchain adoption, auditing market, ERC, on-chain representation, account abstraction, user experience, security, auditors, incentives, composability, security conferences Takeaways: - Security is a key factor in mainstream blockchain adoption. - The auditing market in crypto has seen challenges, including long wait times and reduced audit quality. - The ERC for on-chain representation of audits can bring more security and transparency to the ecosystem. - Account abstraction has the potential to improve user experience and security in blockchain applications. - Selecting auditors is challenging, and better incentives are needed for security researchers. - Composability introduces additional risks, and incentives can be used to mitigate them. - Attending security conferences is important for learning and networking in the industry. Some Bites: - "Security is one of the three big blockers for mainstream adoption." - "The auditing market faced issues with long wait times and reduced audit quality." - "The ERC for on-chain representation of audits can bring more security and transparency to the ecosystem." - "If we lose our good relationships to the security researchers, there's a big chance that everything will be less secure."