The first of its most comprehensive security initiatives to date was published by the ETA Foundation, which describes the key risks that ETH must be addressed to support trillions of dollars in the global chain.
The first “Trillions of Security” report outlines what individuals, institutions and Governments need to trust networks and invest significantly larger funds. The report was released in the weeks following the recent reorganization of the Foundation, and these initiatives have also explored a number of areas in depth.
Based on extensive feedback from developers, users and security professionals, the report identifies gaps in six core areas: user experience, smart contracts, infrastructure, consensus mechanisms, incident response and governance.
The report will serve as the basis road map for the next phase of security improvements in the Etheraf.
Gaps in ecosystems According to the report, most of the safety burden of the Taifeng remains on end users due to poor wallet user experience, blind signatures and inconsistent authority controls. These problems continue to pose a repeated threat, and the fragmentation of wallet standards impedes safe use.
In addition, institutional users face additional frictions in managing key, audit tracking and customized workflows, which are not adequately supported by current infrastructure.
The report also noted that, despite improvements, there were risks of upgrading of smart contract security, failure of access controls and low rate of formal validation.
At the same time, reliance on centralized infrastructure (e.g., RPC providers, DNS and cloud hosts) weakens the assurance that the Ether Workshop will go into centreization. The Layer-2 solution introduced new complexities, and the possibility of ISP-level review and DNS hijacking was still not fully recognized.
At the level of the agreement, the report notes that centralized certification and unclear recovery procedures continue to raise concerns about the failure resilience of the Taifaf in marginal situations.
The report also highlights the importance of a long-term transition to anti-quantifiable cryptography.
Coordinated security futures were reported to be limited by gaps in surveillance, coordination and recovery of the capacity to respond to threats.
When trying to reach affected teams or to upgrade across platforms, responders often encounter delays. There are no clear channels of communication or pre-established contacts whose precious time was wasted during the events.
The report also mentions the lack of effective monitoring tools for early detection of threats on and below the chain. In many cases, security loopholes were not noticed until damage was caused.
Insurance coverage remains scarce. Unlike traditional financial systems, the limited access to insurance in the application has exposed users and organizations to the full risk of loss when attacked.
In the area of governance, the report warns that the social layers of the Taifung — that is, its network of developers, institutions and cultural norms — are themselves potential vehicles of attack. It points to the risks posed by the concentration of pledge, regulatory pressure and the organizational impact of possible changes in the direction of the Taicha.
The report also notes that the absence of a “social penalty” process is a critical loophole in the case of a certificationer's conspiracy or agreement to capture.