clet.xyz

During Devconnect Buenos Aires, a pivotal event convened Ethereum security practitioners to address the monumental task of securing a trillion-dollar economy. The Ethereum Foundation, in collaboration with Secureum TrustX, hosted Trillion Dollar Security Day, a focused gathering designed to foster deep-dive discussions across the Ethereum security ecosystem. Approximately eighty participants, representing diverse domains from Infrastructure, Interoperability, Layer 1 & 2, Onchain, Offchain, Privacy, and Wallets, converged to critically assess the current security posture, identify pervasive challenges, and chart concrete next steps for the entire technology stack. The outcomes of this intensive session are directly feeding into the Ethereum Foundation’s ongoing "One Trillion Dollar Security" (1TS) initiative, a strategic endeavor to proactively address the security demands of Ethereum’s projected economic growth.

The impetus behind Trillion Dollar Security Day was to cultivate focused, in-person dialogue within specific layers of the Ethereum stack. By bringing together practitioners working on similar components, the event aimed to facilitate a candid assessment of existing security measures, share real-world operational experiences, and prioritize immediate areas requiring attention. The insights gleaned from these granular discussions were then synthesized to reveal overarching patterns and interdependencies across the broader Ethereum ecosystem. The overarching goals of the gathering were to: meticulously map the security landscape across each layer; identify critical vulnerabilities and emerging threats; foster collaboration and knowledge sharing among security experts; and define actionable roadmaps for enhancing Ethereum’s security resilience.

A Snapshot of Cross-Layer Observations Revealed Recurring Themes

Across the seven distinct layers of the Ethereum ecosystem, participants identified several recurring themes that underscore the complexity and interconnectedness of securing a rapidly evolving decentralized network. These cross-layer observations paint a comprehensive picture of both strengths and vulnerabilities, guiding future development and security efforts.

The table below summarizes the key issues and immediate next steps identified during the sessions, offering a condensed yet insightful overview of the challenges and proposed solutions:

Layer 1 & 2: Coordination Remains a Bottleneck in Scaling Security

The robust foundation of Ethereum’s security is significantly bolstered by its multiclient architecture, a commitment to specification-driven development, and a deliberate, conservative approach to changes on Layer 1. However, participants at Trillion Dollar Security Day voiced concerns regarding the burgeoning risks associated with insufficient coordination between Layer 1 and Layer 2 solutions. This includes issues such as the over-reliance on cloud infrastructure, which presents a single point of failure, and the inherent vulnerabilities of compressed testing timelines that may not adequately uncover all potential flaws. Furthermore, the persistent threat of supply-chain attacks remains a critical area of focus.

Specific challenges highlighted within this layer include the limited engagement from the broader community and Layer 2 developers in crucial All Core Devs calls, a constraint on the capacity of client teams to thoroughly review evolving Ethereum Improvement Proposals (EIPs) in their nascent stages, and ongoing concerns surrounding the resilience and security of Layer 1-Layer 2 bridging mechanisms and Remote Procedure Call (RPC) services.

To address these critical issues, proposed next steps center on expanding the reach and impact of the Ethereum Protocol Fellowship (EPF), a program designed to foster protocol development expertise. The initiative also advocates for the establishment of clearer liaison roles specifically for Layer 2 solutions, enhancing the clarity and ownership expectations surrounding EIP versioning, and strengthening the moderation and accessibility of coordination forums to encourage broader participation. The quantum computing threat, while a long-term concern, was also flagged as an area requiring proactive research and strategy development.

Wallets: User Security Remains Too Opaque and Fragmented

While progress has been made in signing standards like EIP-7730 and improving the discoverability of wallet solutions, a significant concern persists regarding the opacity of user security. A notable portion of hardware wallets still rely on blind signing, a practice where users approve transactions without full visibility into their details, potentially exposing them to sophisticated phishing or malicious contract interactions. Furthermore, participation from wallet developers in broader, shared security discussions has remained relatively limited.

The competitive nature of the wallet landscape was identified as a structural impediment to open collaboration, compounded by an over-reliance on the Ethereum Foundation to spearhead coordination efforts. This dynamic can lead to a fragmented approach to security, where individual wallet providers develop their own solutions rather than contributing to a unified, robust ecosystem standard.

A pivotal proposal emerging from this session was the formation of an Open Signing Alliance. This alliance would be anchored in Ethereum’s core values of openness, neutrality, and the "walkaway test" – a principle that users should be able to understand and reject transactions without penalty. Additional priorities include establishing the EIP-7730 registry within a neutral or on-chain context, thereby enhancing its accessibility and trustworthiness. The development of wallet-focused security dashboards was also deemed crucial for improving transparency and bolstering the legitimacy of wallet security practices.

Onchain Security: Tooling and Visibility Lag Behind Emerging Risks

The onchain security domain continues to benefit from a growing cohort of seasoned security researchers and the development of powerful tooling, such as Foundry, which facilitates more rigorous smart contract development and auditing. Increased awareness of incident response, partly driven by initiatives like SEAL911 (Smart Contract Security Auditing and Incident Response), has also been a positive development. However, a persistent issue is the tendency for security to be treated as a mere compliance checkbox, with the term "audited" often being conflated with "secure." This can create a false sense of security, masking underlying vulnerabilities.

Participants emphasized that a significant portion of recent financial losses within the ecosystem stem not from novel smart-contract exploits, but from operational security (OpSec) failures. These can range from compromised administrative keys to social engineering attacks. Other significant challenges include the increasing complexity of decentralized finance (DeFi) protocols, a lack of comprehensive invariant monitoring, and a deficit in economic audits, which scrutinize the economic incentives and potential game-theory exploits within protocols.

The immediate next steps identified in this area focus on sustained funding for open-source security tooling, including fuzzers, static analyzers, and dynamic analyzers. The creation of improved visibility into DeFi security posture, perhaps through a "L2BEAT-like" approach that provides comprehensive analysis and risk assessments, is also a priority. Broader adoption of SEAL frameworks and standardized checklists for different classes of smart contracts is also being encouraged to promote best practices and a more consistent approach to security.

Interoperability: Trust Assumptions Must Be Explicit to Safeguard Users

The Ethereum ecosystem offers users a vast array of interoperability solutions, enabling increasingly fast and low-cost cross-chain interactions. However, participants raised a critical concern: many interoperability protocols rely on poorly communicated or implicit trust assumptions. This can lead users to mistakenly equate "fast and cheap" transactions with "safe" ones, potentially exposing them to significant risks.

A significant number of non-canonical bridges, which are often built with expediency in mind, can fail the fundamental "walkaway test." Furthermore, risks can persist even after assets have been bridged, due to the complexities of wrapped assets and cascading dependencies across various protocols. This creates an intricate web of potential vulnerabilities that can be difficult for the average user to navigate.

Proposed actions to address these challenges include the development of interoperability trust ratings. These ratings would explicitly detail the underlying assumptions and verification models employed by different bridging solutions, providing users with much-needed clarity. Setting strong expectations for explicit trust disclosures by cross-chain aggregators is also crucial. Efforts to improve the speed and cost-effectiveness of canonical bridges are vital to reduce the reliance on potentially unsafe alternatives. A dedicated follow-up workshop focused on interoperability was also proposed to delve deeper into these complex issues.

Privacy: User Experience and Infrastructure are the Primary Constraints on Adoption

There was a broad consensus that privacy is increasingly being recognized as a normal and essential component of Ethereum’s future. Encouraging progress in zero-knowledge (ZK) research and the growing interest from institutional players signal a positive trajectory. However, significant hurdles remain, primarily in the form of user experience (UX), prohibitive costs, and fundamental infrastructure limitations, which collectively act as major blockers to widespread adoption.

Key challenges include the pervasive issue of RPC-based tracking, which can compromise user privacy even when interacting with decentralized applications. Difficulties surrounding the secure private data storage and recovery mechanisms also pose a significant barrier. A notable absence of developers focused on creating intuitive and private wallet UX is a critical gap. Furthermore, the lack of hardware support for privacy-preserving keys means that users cannot rely on secure, dedicated hardware for managing their private data.

Suggested next steps include a greater utilization of light-client data transmitted over peer-to-peer (P2P) RPC connections, reducing reliance on centralized RPC endpoints. Significant investment in enhancing private wallet UX is also deemed necessary. Research into ZK-capable hardware signers is a crucial area for future development. Finally, proactive engagement with regulators is essential to seek clearer guidance and a more supportive environment for permissionless privacy technologies.

Infrastructure & Offchain Security: The Invisible Attack Surface Requires Urgent Attention

Frontend compromises, DNS hijacks, RPC centralization, and software supply-chain attacks were repeatedly identified as underappreciated and critical risks within the Ethereum ecosystem. These threats operate in the "invisible" attack surface, often overlooked in favor of more visible onchain vulnerabilities. Participants also noted a lack of sustainable economic alignment for non-profit organizations that provide essential security public goods. This can lead to underfunding and strain on resources critical for maintaining network security.

Key challenges include the artificial separation often drawn between "Web2" and "Web3" security practices, leading to a fragmented understanding of threats. There is also limited accountability for off-chain failures, where the consequences may not be immediately apparent onchain. The tendency to prioritize speed or convenience over robust security measures was also highlighted as a persistent issue. The inability for users to easily run nodes over Tor, a network known for enhancing anonymity, was also cited as a limitation in the current infrastructure.

Proposed next steps encompass the development of verifiable frontend prototypes, enhancing transparency around the health and security of RPC and broader infrastructure. Advancing the development of comprehensive security frameworks and certifications will provide standardized benchmarks for security practices. Furthermore, creating structured collaboration models where private companies contribute dedicated time and resources to support security public goods is crucial for long-term sustainability and impact.

Event Reflections: A Call for Applied Standards and Practical Guidance

Participants overwhelmingly rated the quality of discussions and the relevance of the topics addressed as excellent. The value of in-person, cross-layer exchange was particularly lauded, fostering a sense of shared understanding and collaborative spirit that is difficult to replicate through asynchronous communication alone. The primary areas identified for improvement were logistical in nature, including optimizing group sizes for more effective discussions and creating more opportunities for structured networking.

A strong demand was expressed for future work focusing on the development and implementation of applied security standards, the creation of shared tooling that benefits the entire ecosystem, and the provision of practical "how-to" guidance for implementation. This indicates a clear need to move beyond theoretical discussions to tangible, actionable solutions that can be readily adopted by developers and users alike.

What Comes Next: Sustaining Momentum for a Secure Trillion-Dollar Economy

The Trillion Dollar Security gathering effectively highlighted the profound value of bringing security practitioners together in person. These face-to-face interactions were instrumental in building shared understanding and generating momentum for critical security initiatives. The focused, in-depth discussions accelerated alignment on standards, tooling, and practical solutions in ways that are challenging to achieve through asynchronous coordination alone.

The discussions also underscored the vital importance of maintaining a continuously updated, shared view of Ethereum’s security posture. As the ecosystem continues its rapid evolution, staying ahead of emerging risks necessitates a regular reassessment of what is currently working, where existing assumptions may no longer hold true, and which areas require renewed attention to adequately support a trillion-dollar economy.

The insights gleaned from the Buenos Aires event will continue to inform the Ethereum Foundation’s One Trillion Dollar Security efforts, complementing ongoing work across the broader ecosystem. The near-term focus remains steadfast on supporting the execution of identified action items, enabling the widespread adoption of open and neutral security standards, and strengthening the fundamental foundations required to ensure Ethereum’s security at an unprecedented scale.

The event organizers extended their gratitude to the security layer champions: @vdWijden, @BarnabasBusa, @zachobront, @ethzed, @mattaereal, @ncsgy, and @ThewizardofPOS. Special thanks were also given to @0xRajeev and @fredrik0x for their invaluable hosting contributions, underscoring the collaborative spirit that defined Trillion Dollar Security Day.