Devcon Archive logo
Devcon Devconnect Forum Blog
  • Watch
  • Event
    Event: background logo
    • Devcon 7
    • Devcon 6
    • Devcon 5
    • Devcon 4
    • Devcon 3
    • Devcon 2
    • Devcon 1
    • Devcon 0
    • Devconnect ARG
  • Categories
    Categories: background logo
    • Cryptoeconomics
    • Devcon
    • Developer Experience
    • Coordination
    • Core Protocol
    • Layer 2s
    • Real World Ethereum
    • Cypherpunk & Privacy
    • Security
    • Applied Cryptography
    • Usability
  • Playlists

Suggested

Loading results..

View all

About Devcon —

Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.

An intensive introduction for new Ethereum explorers, a global family reunion for those already a part of our ecosystem, and a source of energy and creativity for all.

  • Watch
  • Devcon
  • Devconnect
  • Forum
  • Blog

Get in touch

devcon@ethereum.org

Subscribe to our newsletter

Crafted with passion ❤️ at the Ethereum Foundation

© 2026 — Ethereum Foundation. All Rights Reserved.

devcon8 / design for the compromised signer bounding blast radius in smart accounts

  • YouTube
Design for the Compromised Signer: Bounding Blast Radius in Smart Accounts preview
  • Details

Design for the Compromised Signer: Bounding Blast Radius in Smart Accounts

Duration: NaN:NaN:NaN

Speaker: Dev Pramoth

Type: Lightning Talk

Expertise: Some familiarity with the topic

Event: Devcon

Date: Nov 2026

Since 2024, over $2B has been stolen from multisig-secured organizations — Bybit ($1.4B), WazirX, DMM, Radiant. No keys were stolen; no multisig math was broken. In every case the signer's screen lied: the approved payload wasn't the displayed one. More signers didn't help. Better signing UX didn't help. The one layer those attackers couldn't touch is onchain enforcement at the account itself. In 5 minutes I'll share a mental model for designing it, from building smart account policy enforcement in production: two composable primitives — execution scoping (who can act, within what bounds) and universal guards (what the account may ever do) — plus the rule that decides whether a policy is real or theater: policy must protect itself. If reconfiguration outpaces your transaction delay (Beanstalk, $182M), you built decoration, not defense.

Categories

WalletsUXSecurityCoordination