ZachXBT

Cyber

Security

Crypto companies need to be more vigilant about the code they integrate into their platforms, according to JP Richardson, CEO of self-custodial platform Exodus. <a href="https://cointelegraph.com/news/crypto-firms-engineers-code-malicious-actors-exodus-ceo-token2049" rel="noopener noreferrer nofollow">Speaking</a> at the Token2049 conference in Singapore, Richardson stressed that every piece of code, no matter the source, must undergo thorough external reviews before being implemented.
This approach, he argued, is critical to protecting both the platform and its users from potential cyber threats, particularly as bad actors become more sophisticated in their infiltration techniques.
<h2 id="span-style-font-weight-400-growing-threat-of-malicious-actors-span">Growing Threat of Malicious Actors</h2>
Richardson’s remarks come in the wake of an alarming rise in malicious actors infiltrating crypto firms. He pointed out that some bad actors have gone as far as securing jobs within these companies by posing as legitimate engineers. Their aim is often to introduce harmful code into the firm’s software, creating significant security vulnerabilities. Richardson explained:
<blockquote>
 “Bad actors are becoming more skilled at tricking firms into trusting them, and this is why a robust review process is essential.”
</blockquote>
He added that companies should never rely solely on the trustworthiness of individual engineers but must implement a comprehensive second-layer review process for all software updates.
<h2 id="span-style-font-weight-400-prioritizing-customer-safety-span">Prioritizing Customer Safety</h2>
The Exodus CEO emphasized that the safety of customers’ data should always be the top priority for crypto firms. He noted that building a resilient operational system is the only way to ensure that even if malicious code is introduced, customer data remains secure. “It really comes down to building a system so that if a breach does occur, your customers are still safe,” Richardson said.
At Exodus, the security team reviews every code submission, regardless of whether it comes from internal staff or new engineers. “We never assume that a trusted engineer’s work is beyond scrutiny. Every update goes through the same stringent review process,” Richardson emphasized.
<h2 id="span-style-font-weight-400-north-korean-cyber-threats-span">North Korean Cyber Threats</h2>
Richardson’s comments are also in line with a broader conversation in the crypto community about the rising <a href="https://thecoinrise.com/north-korea-hackers-siphoned-1-7b-in-cryptocurrency-in-2022/" rel="noopener noreferrer nofollow">threat of North Korean hackers</a>. Recently, blockchain investigator ZachXBT uncovered a network of North Korean developers, some earning up to $500,000 monthly from established crypto projects. These hackers used fake identities to infiltrate firms and push malicious code into their systems.
The FBI also recently warned crypto firms about <a href="https://thecoinrise.com/alex-lab-links-4m-crypto-hack-to-north-korean-lazarus-group/" rel="noopener noreferrer nofollow">North Korean hackers targeting decentralized finance (DeFi) platforms</a> and exchange-traded funds (ETFs). These bad actors are leveraging complex social engineering tactics to gain access to sensitive information and financial systems, further underscoring the need for robust security practices.
The post <a href="https://thecoinrise.com/crypto-firms-must-tighten-security-measures-to-combat-malicious-code-says-exodus-ceo/" rel="noopener noreferrer nofollow">Crypto Firms Must Tighten Security Measures to Combat Malicious Code, Says Exodus CEO</a> appeared first on <a href="https://thecoinrise.com/" rel="noopener noreferrer nofollow">TheCoinrise.com</a>.

Crypto Firms Must Tighten Security Measures to Combat Malicious Code, Says Exodus CEO

Table of Contents

TheCoinrise Media

Other articles published on Sep 21, 2024

Indodax Exchange Loses $20.5M in Suspected Lazarus Group Cyberattack

RISE, the Gigagas Layer 2, announces its $3.2M Seed Round

ZKsync Integrates Chainlink CCIP to Power Cross-Chain Token Transfers

Coinpedia Fintech News

Arthur Hayes Sells $4.4 Million in $PENDLE Holdings

Charles Hoskinson Fears Partisan Rift From Trump Crypto Initiative

Join our free newsletter for daily crypto updates!