Web3 Security Expert Explains Blockchain Defense Strategies

Blockchain security has become a top priority in the Web3.0 space. The co-founder and CEO of CertiK, and a professor of computer science at Columbia University, recently gave an interview sharing the latest insights in the field of blockchain security.

CertiK was founded in 2017 and is dedicated to enhancing the security of blockchain and smart contracts through formal verification technology. As of now, CertiK has provided services to over 4,900 enterprise clients, safeguarding over $53 billion in digital assets and identifying more than 115,000 code vulnerabilities.

According to the security report released by CertiK for the first quarter of 2025, losses from on-chain fraud incidents amounted to approximately $1.66 billion, a staggering increase of 303% compared to the previous quarter. Ethereum remains the primary target of attacks, with just 3 incidents resulting in a loss of $1.54 billion in assets. Even more concerning is the recovery rate of stolen assets, which is only 0.38%.

In the face of increasingly complex attack methods, the blockchain security industry is actively responding. Innovative technologies such as zero-knowledge proofs and multi-party computation are providing new ideas for solving security issues. These technologies are expected to achieve transaction auditability, attack traceability, and asset recovery while protecting privacy.

For blockchain developers, experts recommend integrating security throughout the entire development process and seeking third-party security audits. This "security-first" strategy is crucial for building trustworthy Web3.0 applications.

AI technology plays a double-edged role in blockchain security. On one hand, it can help analyze smart contract vulnerabilities and improve audit efficiency; on the other hand, attackers may also leverage AI to enhance their attack methods. This signifies that the industry needs to invest in more robust security solutions.

Formal verification is a technique that uses mathematical methods to prove the correctness of programs. In smart contract auditing, it can complement manual audits to enhance contract security.

As traditional financial institutions enter the Blockchain field, the types and complexity of security threats are also evolving. Future attacks may increasingly target enterprise-level vulnerabilities such as configuration errors, custom smart contract vulnerabilities, and security flaws in the integration interfaces with traditional systems.

In the Web 3.0 era, security is no longer a remedial measure, but should be integrated into every stage of project development. Only through continuous innovation and vigilance can we build a solid security barrier for digital assets.