Software Supply Chain Security of Crypto

​Speaker: Martin Monperrus is professor at KTH Royal Institute of Technology in Sweden and co-founder of mab.xyz. His research is about reliability and security of crypto.

​

​Abstract: The Web3 paradigm, built on the promise of decentralization and trustless execution, has attracted massive investment and innovation. However, the decentralized applications (dApps) and smart contracts that secure billions of dollars in assets are themselves built upon complex, centralized, and often vulnerable software supply chains. From npm packages to compilers and development frameworks, every component represents a potential attack vector. This talk dissects the software supply chain of the Web3 ecosystem, identifying unique risks that arise at the intersection of traditional software development practices and the high-stakes, immutable nature of blockchain technology. Drawing from foundational research in software engineering, we will explore threat models, analyze recent real-world attacks, and propose solutions to harden Web3 against this growing class of threats. Homepage: https://mab.xyz/