​Spotting Vulnerabilities in Your Blockchain Programs

​Blockchain programs can look secure on the surface while hiding weaknesses in program logic, authority, state changes, and execution paths.

​In this session, we’re moving inside the program to understand how attackers actually find these weaknesses and how seemingly small flaws can become exploitable attack paths.

​Jade, founder of 0xSec and a five-year security engineer, will break down how to approach blockchain security from an attacker’s perspective: what a program is allowed to do, how actions change state, where assets and authority can move, and how to identify behavior that doesn’t match the intended outcome.

​The session will focus on practical vulnerability discovery rather than generic security theory.

​What we'll explore

• ​How to inspect blockchain program logic for security weaknesses

• ​How authority and permissions can create unexpected attack paths

• ​How state changes can reveal exploitable behavior

• ​How to trace the impact of a vulnerability beyond the initial bug

• ​How attackers think about seemingly valid blockchain actions

• ​How intended actions can differ from their actual transaction effects

• ​Why analyzing actions before execution can expose risks before they become irreversible

​Jade will also share perspective from his work at 0xSec, where 0xSecure applies pre-signing transaction analysis, intent verification, and enforceable policy to protected blockchain flows.

​The goal is simple:

​Learn to look beneath the surface of a blockchain program, find the weakness, and understand what an attacker could do with it.

​Guest Speaker — Jade

​Jade is a five-year security engineer and the founder of 0xSec, with experience working in government security environments and protecting approximately $20M.

​His security work focuses on identifying weaknesses in blockchain programs and understanding how program logic, authority, state changes, and transaction behavior can combine to create exploitable attack paths.

​Jade approaches security from an attacker’s perspective examining what a program is actually allowed to do, tracing how actions affect state or move assets and authority, and looking for situations where seemingly legitimate actions can produce unintended effects.

​Through 0xSec, he is also working on 0xSecure, a transaction security layer designed to analyze blockchain actions before signing, compare intended actions against actual transaction effects, and apply enforceable policy before protected execution.

​Who should attend?

​This session is useful for:

• ​Blockchain developers building or maintaining on-chain programs

• ​Security engineers and researchers looking to improve vulnerability discovery

• ​Founders and technical teams building blockchain products

• ​Protocol and infrastructure teams responsible for protecting on-chain operations

• ​Anyone who wants to better understand how attackers identify weaknesses in blockchain programs

​You don't need to be a security researcher to follow the session. The focus is on understanding the mechanisms behind vulnerabilities and learning how to reason about attack paths.

​Closing

​Don't just ask whether your program works.

​Ask what an attacker can make it do.

​Investigate First. Trust Later.