Web3 Security: The Importance of Underlying Security Cannot Be Ignored

The rapid development of the Web3 industry is eye-catching, but its underlying security issues are often overlooked. Currently, the Web3 field focuses more on on-chain security and the security of the blockchain ecosystem itself, while there is a lack of awareness regarding system-level, browser, mobile, and hardware vulnerabilities. This situation has formed for two main reasons: first, the Web3 industry is still in its early stages, and related technologies and security measures are still being explored and improved; second, existing cybersecurity regulations have prompted Web2 companies to strengthen their own security construction.

However, we cannot ignore that Web3 is built on the infrastructure of Web2. If there are security vulnerabilities in the underlying Web2, it will pose a serious threat to the entire Web3 ecosystem, directly jeopardizing the safety of user assets. For example, vulnerabilities in browsers or mobile devices may lead to asset theft without the user's knowledge.

In fact, there have already been cases of stealing digital assets by exploiting Web2 vulnerabilities. For example, hackers have used zero-day vulnerabilities in Bitcoin ATMs to steal cryptocurrencies, North Korean hackers have attacked using zero-day vulnerabilities in the Chrome browser, and even vulnerabilities in Microsoft Word have been used to steal cryptocurrencies. These cases fully demonstrate that the threat of Web2 vulnerabilities to digital assets is real and serious, not only threatening personal assets but also potentially affecting exchanges, asset custody companies, and other institutions.

Therefore, it can be said that without the underlying security of Web2, it is difficult to ensure the security of the Web3 domain. The security measures in the Web3 domain should not be limited to a single code audit, but also require more security facilities, such as real-time detection and response to malicious transactions. Security technology is directly related to user assets and is an important reflection of the capabilities of security companies.

In the future, the Web3 industry needs to focus more on research into underlying security technologies and strengthen communication and cooperation within the industry. Only through joint efforts can a safer environment be built for the Web3 field, protect user asset security, and promote healthy industry development.