​Secure Your Web3 Applications from Real-World Threats

​Building a Web3 application means securing more than the code that runs on-chain. Real-world attacks can emerge from the way applications handle users, permissions, transactions, smart contracts, and the systems surrounding them.

​In this session, Jade, founder of 0xSec and a five-year security engineer, takes an attacker-first look at Web3 security. Drawing from his experience working in government security environments and protecting high-value systems, he’ll explore how vulnerabilities move from technical weaknesses to practical attack opportunities.

​Rather than treating security as a checklist, we’ll examine how attackers connect individual weaknesses, identify unintended behavior, and turn legitimate application functionality into something the system was never meant to allow.

​What we'll explore

• ​Where real-world threats intersect with Web3 application architecture

• ​How attackers identify weaknesses across applications, programs, and transaction flows

• ​How permissions, authority, and application logic can create unexpected paths

• ​How to recognize behavior that looks legitimate but produces unintended security consequences

• ​How to think about vulnerabilities in terms of their real-world impact

• ​How analyzing transactions and user intent before execution can prevent dangerous actions

• ​Practical ways builders can reduce attack surface before vulnerabilities become incidents

​Jade will also bring insights from 0xSec and its work on 0xSecure, exploring how transaction analysis, intent verification, and policy enforcement can help protect blockchain interactions before they are executed.

​The session is ultimately about changing the way you look at security:

​Don't just ask what your application is designed to do. Ask what an attacker can make it do.

​Who should attend?

​This session is especially relevant for:

• ​Web3 and blockchain developers

• ​Security engineers and researchers

• ​Protocol and infrastructure teams

• ​Founders building Web3 applications

• ​Technical teams responsible for application security

• ​Builders who want to understand how real attackers approach Web3 systems

​You don't need to be a professional security researcher. The session is designed to help builders develop a more practical understanding of where vulnerabilities come from, how they can be connected, and what can be done to catch them earlier.

​Your application may work exactly as designed.

​The question is whether an attacker can make it work differently.

​Investigate First. Trust Later.