OWASP Global AppSec Lisbon 2024

Securing crypto browser wallets is quite a challenge.

On the one hand, it's just a normal JavaScript Web extension for the most part, so therefore securing it should resemble classic web application security.

On the other hand, the crypto space introduces major software architecture paradigm shift, making a lot of classic web application security practices not resilient enough for the task.

For example, how do you monitor and block suspicious activity when there's no server to help you with that in the first place?

And to make things even more challenging - for the first time ever, literally billions of dollars are at stake!

Come listen to the unique challenges in our journey to defend first-of-its-brand software in an industry processing a never-seen-before volume of financial goods (and how JavaScript and the web are both the problem and the solution)

But most importantly - how does this all connect to traditional web app security and what can it teach us in order to improve it?