Social Engineering: How Users Get Exploited
🔐 Social Engineering in Web3: How Attackers Exploit You, Not Your Code
Most Web3 attacks don't break smart contracts. They break people.
This session is a hands-on deep dive into the human side of crypto security, the manipulation tactics that bypass technical defenses entirely. Whether you're a developer, trader, NFT collector, or just getting started in Web3, this talk is built for you.
What we'll cover:
We'll open with a simple but uncomfortable truth: the majority of on-chain losses don't come from code exploits. They come from users approving malicious actions, wallets drained after signing a "harmless" message, assets lost to a fake mint, funds gone after a support DM.
Then we break down the mechanics. Using a structured framework of attack mechanisms - from urgency and authority to information asymmetry and delayed consequences — we'll map exactly how these attacks work on a psychological level.
The core of the session is four interactive showcases, each based on real incidents:
🎨 Fake NFT mint: urgency, familiarity, and the BAYC Discord compromise
✍️ Signature request scams: habit loops, control illusion, and Angel/Monkey Drainer
⏳ Approval with delayed drain: default bias and the 2022 OpenSea phishing wave
💬 Fake support messages: authority, identity spoofing, and Ledger phishing campaigns
For each scenario, you'll have a chance to identify the mechanisms at play before we reveal them - then we'll discuss real mitigation strategies you can apply immediately.
You'll leave with:
✅ A mental model for recognizing manipulation before you sign
✅ An understanding of how attacks chain multiple mechanisms together
✅ Practical tools and habits to protect yourself on-chain
Who this is for: Anyone active in Web3 - no prior security background needed. The goal is pattern recognition, not technical expertise.
Speaker & Host
Speaker: Masha Vaverova - Smart Contract Security Researcher, FullStack Blockchain Developer
Host: GetBlock - Web3 node infrastructure for building dApps across 130+ blockchains.