Wallet Security | Ledger

Transcript

No reason. That's fine. All right. Um, so I'm going to prepare just the live streaming side that tag. [Music] Wait check. Select the cells up. Hi everyone.

So we will start this term inside um on the same time um just okay that's All right. Okay.

Um so wait normally we are live on Twitter. Yes. All good. So I'm going to send you the link. Yes. Send it to me and hi everyone by the way. Yeah. And I will share directly with our com team. All right. is good. Very good. Thanks. Just I will put a reminder quick reminder on the chat line. All right. Uh so people will come um along the

way. Yeah. Um so just to make sure everything is okay. So onyx we can see it and then okay are you ready Kolina? Yes hello everyone I can start to share my screen if it's okay for you Sen. Yeah for sure thanks Karina for being here. Um so to to introduce a bit a bit Karolina. So we were together um in cryptosphere at cryptos for it's actually the the first leading repairing blockchain club and so um basically we were doing some stuff

together and then uh actually on my on my side I was at leger before too um so I I know pretty well uh this company Karina jump into it just after me and right now she's doing some stuff there so she she she going to present herself better than me. Um, but she she she's a really great uh person and we are glad to to have her uh today with us. Thank you very much, Sen. And yes, I'm very happy to be here with you today uh to talk about ledger and security. Um so yeah, let's go. Um just a few words about me. As Sen said, I

have a technical background with an engineering degree. Um I was part of cryptosphere uh also doing some uh research and writing reports uh in consulting firm as internship and um then I started my job uh at leger as a software security engineer first and now doing my PhD. Uh it's been nearly two years uh so in France we do PhD in three years mostly. So um I'm on in an exciting uh step right now publishing papers and sharing my work. So um so yeah it's cool. Uh however I'm here to talk more about uh what we do at leger and um hardware and software security.

Uh before we deep dive into this uh I would like to do an intro to you about what is cyber security and what types of job you can find there because from what I understand you are coming from web two with web two background. Um maybe some of you several of you are also web two security people. So you can do similar jobs in the web tree and in a company like ours. We have several uh teams that are um doing security. Uh we have the corporate security team which focus on um everything that is related to our um corporate security which mean deep diving the people logs taking care about

the all the firewalls and all the important um configuration of our network so that we don't have any attacks. And then we have the product uh product security team uh which focus more on the security of the uh of our um uh products and all the services that we also uh have and give to to our users. Uh so this is more a red team based approach with people who do pentests. uh all these keywords are are important but uh it's just to to to to show you that yeah these are are usually different branches and then there are people who do certification so they do uh like they

certify that product is follows the EO something norm and uh that is important to guarantee that our products are at the top of the security and you can do also all these type of jobs at ledger but also in other types of companies. So that maybe gives you some ideas on what you you could do next. Um so let's deep dive into what we do. Uh so first ledger is ledger group is today secur sec securing um an average of 20% of global crypto assets worldwide. Um we are very happy of that.

We have a big team uh that is based uh here in Paris but also in many different places all around the world. Uh we dedicate a lot of resources to our research and development. Uh and uh we work also with uh in institutional clients uh because it's important so they have also a a good level of security. Um as you maybe you know uh what we do is that we um uh we do hardware wallets. Uh what does it mean? What is a hardware wallet? It looks like a USB uh stick. Uh however, it has a screen and it enables you to store any types of secrets. This is what you need

to remember. We have devices of high security that enable you to store secrets uh mainly for the crypto ecosystem. Um but also uh you can store your password or different types of things that you want to keep secure. So we have these different types of products. It started with the Ledger Nanos um Nano S, Nano X, Nano S+ and uh since uh 2023 we started to have a bigger screen um for a better user experience. And now we have Ledger Stacks and Ledger Flex and we hope to to continue to to bring a better um user experience to our

users. So this is what we do in terms of product. Uh we also have a lot of services uh that are uh complimentary to these products. So the devices are the one that I showed you before. uh they enable you to uh to secure by exchange your crypto assets or your secrets. Uh you also have what we call a companion app which is called Ledger Live which is an application that you can have um on your smartphone or but but also on your uh computer uh and your desktop. And so it enables you to monitor um what you have uh in in your hardware device to interact with it to bridge also to

additional services to allow partners to uh bridge to the decentralized finance world and etc. So it's really the gateway to extended services that bring to uh to this world and then um there is a an additional service that is a ledger enterprise uh which is a kind of vault specialized for uh companies and institutionals that I told you before. Uh this is the enterprise solution uh which is uh most adapted for bigger companies who wants to have uh better tracking and better uh handling their assets. Um so uh it's a very good

solution and it's um it relies on our secure uh technology as all the rest of our products. So what's important here at Ledger, what we often say is that not your keys, not your coins. Maybe you have already heard this sentence. What does it really means? Um to own a crypto asset means that you have uh the control of the private key that manage your crypto asset. And this is very important. Um when we say that you have a a wallet, uh what do you have inside the wallet? you don't have the coins, you have the

private key that enable you to access your coins. This is really a big difference with the physical words uh in like in when you have cash, you put cash in your wallet, but here you don't put the coins or the bitcoins or the ether in your uh in your wallet. you put the private key uh that enables you to access your assets, your crypto assets that are on the blockchain and they never leave the blockchains. It's just um a way to uh to show that uh they belong to you and this is uh the most sensitive part that you want to uh preserve and to secure and to keep it in a secure place. Here is a little uh

explanation of what's the private key. uh it's we don't have to deep dive in a in a big cryptography um notions but it's just very simple um initially uh in in our word um you have a private key that is associated to the 24word uh seed phrase that maybe when you have created your MetaMask account or any other wallet account you had to note somewhere all these words they are equivalent having the private key and Having a 24word seat phrase is equivalent and this enable you to sign a transaction or to sign a message uh showing that it's you that has signed uh

this message and then if someone wants to verify that you have signed signed it uh they can verify it using the public key. The public key is linked to the private key, but it's meant to be public. So you uh can distribute it to anyone you want and then people can verify that it's really you that have signed the uh the transaction that really the basic uh that you need to understand. Um maybe I will just add one last thing is that from the public key uh we derive a public addresses and the addresses is what you can find on blockchain explorers like ether scan or other explorers when you look for a

transaction you see that the transaction has been done from an address A to an address B and so from where comes this address it comes from the public key and from one public key you can derive that's the technical uh many different public addresses and then use them uh to send or to receive uh crypto assets. So that's for the technical part. Uh so from this slide you you again you need to understand that what is the secret that you need to store it's your private key and um then uh once you have understood that you you will wonder why our ledger devices uh

are better to store the private key than our competitors one. So first um we talk about MetaMask. MetaMask is one of many other uh software wallets. Uh we also call them hot wallets because they are online. Uh you can access them uh anytime that you have access to internet. Um no. Okay. No, no problem.

Uh yes. So uh software software wallets and hot wallets um they are all the time exposed online. They're usually uh you can have them as a plug-in on your navigator and access them anytime uh anytime you want to uh then do transaction and and so on. The difference with hardware wallets or cold wallets is that uh code wallets they only connect to internet if I can say that when you do the transaction and the rest of the time they're offline they're not connected to any any source of internet or on any network. So um this is a a good way of synchronizing your

private key uh because if there is a vulnerability that is found on any of those wallets if it's on a software wallet anyone can just find uh your wallet and try maybe to exploit it or something. uh whereas on the hardware wallets uh you as long as you keep it with you and you carry it and there is then a fix that comes you have you are less exposed to uh to this kind of attacks. So that's the first thing and then the most important thing is also that they have usually much better security uh because your p your private key or your secret is stored in a specific uh security element that we call a secure element.

So what is a secure elements? Yeah. Um Vishno has a question about if we have to sign in somewhere, do we have to approve it from the code wallet also? Do we have to approve it from the hardware wallet or the software wallet? Right. Uh yeah, like you can approve from anywhere. Like if you have access to your private key and you have to sign a message as long as you have a mechanism that enable you to sign, you can do it from a software wallet or a cold wallet or a hardware

wallet. Uh it's like in Metam Mask you sign transaction in ledger devices you can sign transaction it's they are all made to enable signature that's why they exist there are wallets crypto wallets and this is why you use them is that they have a mechanism that enable to sign so hopefully it uh it helps um to better understand all good Okay. Um, so the now we were saying that what's what is the secure element that makes uh the hardware wallet more secure than software wallets. So secure

elements are uh electronical components uh that uh are used by many hardware but not necessarily all of them uh but the most secure ones I would say and I will include also us use a secure element. So it's a chip. Uh it's like uh when you have your bank card or you have your passport inside you have a chip. When you look at your bank bank cards you see there is a chip and inside it there is also a secure element. So we use a similar technology than bank cards or passport use um to store a secret. The difference is that uh the secret element

we use is made to um to uh so that you protect your own uh datas whereas on the bank card or on a passport it's the company which protect the data they have about you. So it's really uh innovative in that way is that you use a secure element to secure your own u your own u your own data which is the private key and why the secure element is secure is because it has um in inside the chip there is a a memory and the memory you can't you can't access easily this memory. uh it's really well protected and if you try to brute force it or to

uh to take the information from it by any way possible you have additional sensors uh which you can see here in blue or or in green which are uh blocking the memory from giving the secret to the attacker. It can be uh sensors like light sensors or electromagnetical wave sensors because you try to inject laser faults or different types of attacks. Uh and any kind of attacks um that you try to do is supposed to be blocked by a sensor that is integrated in the secure elements. And this made

them very robust and uh and uh and make the work much much much more difficult for an attacker to get the private key that is stored in this secure secure secure space. I have a question. Yes, like into our phone we have a secure somewhere. So it depends of the phones. Um I will not name any phones but there are phones that have a secure elements. There are phones that have what you call secure enclave which is not using a secure element from a specific company but they have built their own secure enclave and there are phones that don't have this type of uh systems they just use what we call an

MCU which is just a chip on which you can run instruction but which is not don't have that much counter measure than a secure element or a secure Enclave has right question from Sophia. Yes. Yes. Hi Karolina. Hi. I just have a question uh regarding this secure element because um in a code wallet as you mentioned we have a hardware protection but then when this for example this chip is I'm not sure if it's built within ledger or is comes from a outsource company but uh in that sense how do companies like ledger

or others secure that they are not um sorry like intervene yes that's A good question. So we work with a partner uh that is ST micro micro electronics which uh guarantee us uh the security of the chip. Uh we have one of the best secure element on the market to be honest. Um and uh that's what make also the difference between us and our competitors but um of course it's a partnership and we know that their secure elements are is one of the best.

Uh so for now uh we yeah we work with them and it works uh good. Uh our competitors have other providers and um it's always a trade-off that you made between what you build and how you integrate the secret elements into your architecture. But as far as we have seen um we we think that it's a good model and uh and uh and we continue to use it. Um and if I if I yes if I continue why I can say that it's not just I'm saying this word and that's that's all. Uh so we have a at leon uh which is uh doing many attacks and

also uh adding counter measure to a product um in that sense to always guarantee the best security that we can. Uh we have different types of um um laser benches and uh here for instance you have a a laser for injection bench that we have presented at hardware IO last year uh on on which we test our product but also our competitors and the goal is to always u understand um what what is done on a on a hardware chip and how we can improve uh the security. So this is actually it was very interesting because it's a a bench

that you can move from one place to another. You see here it's in the box. So my colleague just bring it here and it's like a protectative laser bench. It was very innovative. We also have bigger ones. These two pictures are public by the way. They have been shared in conferences. So you can find them on the u on the presentation related to uh the description. Um so yeah this second uh here installation is a bigger uh lazer fault injection bench. Um that enable us to be uh more precise uh more more fast in the lazard injection. Um and maybe I just maybe haven't really explained why

we do laser injection. uh the the goal is to pertubate the electromagnetical circuits. uh so when you have a chip you know that there uh there is a circuit and and there is I don't know transistor that is communicating with another transistor and maybe during an oper very important um operation that is um for instance proving the integrity of the firmer if you pertubate uh the the circuits at the moment uh on which the firmer is proving that uh the the the software is uh genuine uh maybe you can have something

interesting uh you can bypass this check. So that's why we do fault injection is we perturbate the um the how the secret works and we try to take benefit of it uh and access uh execution scenarios that uh were not supposed to to happen. We can do it uh with laser injections as I said. We can do it with electromagnet magnetical injections. We can do it with power glitches. Uh with yeah there are different types of techniques. They can be combined. They can be used separately. But uh the goal of all all of this research is to uh test uh yeah

what we can do and um that is uh that is what we do at at the dungeon is to make sure that our products can uh resist the the hardest attacks and uh also we test as I said our competitors also systems and and chips. Uh you can find uh several of our uh blog posts uh on our websites u say that explain how we have performed different types of attacks with these machines but also we have some of the attacks that are purely uh based on the software. uh for instance uh we had a case of a wallet that didn't have a good entropy in the generation of

the of the seed so of the generation of the private key if I can say it just simply uh so yeah there can be also some computation that can be done at that level uh you can find also good um u initiation videos uh that are called enter the dungeon on our uh YouTube um channel on the ledger YouTube channel that are very I think a good material to just show you what we do and how we can perform several of these attacks. Okay. So uh except of that ledger is also um giving like giving a developer portal where you can um create

application and uh also use them on your ledger because I didn't mention it but one of the specificities of our product is that we propose a software um that works with this secure elements and that enable you to write an application to deploy it on the software and then uh your application can uh somehow use the secret element features to uh to to perform different types of uh of uh usage regarding what you want to do. So it's really unique. We are the only one proposing this type of experience and it can really be interesting for you if you

want to deep dive uh the sec the secret uh management uh technology and use cases uh to look into this portal and how you could develop interesting things uh for uh for for for w with our products. But by the way, there are a lot of question. So we're gonna reply to to this one uh during the Q&A session. I think it's going to be fascinating. Yeah. Yes. Okay. Uh but that's the end of the first part. So uh I don't know how much they are the question but we can stop here and Yeah. Yeah. For example, is it

possible to change priority in our ledger? Uh yes, you can uh re we refactor your ledger key. If you want to change your wallet and your ledger to support another key, you can refactor it. So yeah. And how how do you manage uh both like metam mask and ledger? Can I use a ledger with metam mask? You already mentioned it, but how how does it work in practice? Um so it's two way of storing uh a private key uh and uh then the coins that you have on the different blockchain you most of the people most

of the people I know have both because they use a meta mask for uh small amount transaction and then if they want to uh have maybe a bigger amount or to have a storage that that is more secure for different reason they use a ledger. Um to use both it's just you have an address uh from one and the other and you can send a transaction from one to the other. Um so yeah it's it's two type of wallets uh that can be used together.

Uh we also have a bridge that is called wallet connect that enables you to make the connection also um if you want to uh to use something else at ledger life. So you have different possibilities. Yeah. Nice. And another question the most common one um if you lost your ledger uh what happened? Yes. When you lost your ledger, uh normally if you have follow all the steps, you have your recovery uh your recovery key like the 24 words that you have written on a on a piece of paper.

So what you have to do is to uh reby your ledger or uh to find another wallet and to um re uh to to to restore uh your wallet from this 24 words into a new ledger and then you can reuse your your phones. You can migrate them to another wallet if you feel more comfortable uh with that. Uh yeah, usually this is what we recommend. Perfect. Thanks for all the answer.

Great. Um, okay. Just looking at the time. Um, yes. So, that was about Ledger. Um, and what we do, harder wallets. Uh, it's a big source of uh also um people who lost the the private key, they lose fun. So it's it's really important for you to think how you manage your private key because um it belongs to you and uh it's self custody. So just for good management uh you have just to follow all the recommendation and then everything should be fine. So yeah that's on the wallet part. Um and then I also wanted to share with you some um uh pieces of information to

better understand web tree security more generally. Um, so since you are uh willing to enter this web ecosystem, I'm just sharing here a little overview that I like to to work with of the current simplified ecosystem of Ethereum, Bitcoin, EVM and alternative ones. So the the only thing to to not that I wanted to underline here is that it's very modular. uh with the last years it becomes there are a lot of components um there have been bridges between these

component that have been created and it become uh very modular even now we talk about layer trees uh so we have this split of all these components and in in security uh this brings a bigger attack surface you don't have anymore only Ethereum or only Bitcoin, you have a whole ecosystem with vulnerabilities and attacks that can happen at different layer layers. So um it can be on smart contract on the EVM on the um blockchain nodes on the bridges on the new languages that have been developed uh to

write the smart contract of the new EVMS or the new chains. Um so there is a lot that can happen and uh we when we look at what attackers can target we can have several categories. The smart contract as I said which have uh been attacked a lot in the past years but I have to say that the security has improved especially for solidity contracts. There have been a lot of audits um especially in the two previous years and somehow now it's not the biggest um the biggest uh point uh where there are the most of

of attacks right now we see much more attacks on the wallet side as I said with uh people uh stealing private keys uh also in the infrastructure and the supply chain uh more generally Um it's yeah attackers have understood that uh to master web three you can also you need to master web two and there are web two components uh like the supply chains and the packages and all the thing all the building blocks of these technologies that can be attacked even the Linux kernel itself uh or the Windows kernel on which work the the

clients. So we expect a lot on on this level in in the incoming months and years in terms of attacks and uh of course the front ends um I understood that many of you came from this uh background and uh it happens that it's a type of attacks that uh is increasing. uh it we didn't find a lot of front end attacks uh two or three years ago but it's something that is really increasing and the last example of by bits uh can be put in this category. So uh if you have heard a bit about by bits it could but maybe it's

not the case for all of you. So just a little um uh deep dive on on what what happened and why you have to uh be aware of uh the front end of your application. Um so what happened is that the hackers compromise the safe developer computer with his credentials and they were able to inject a malicious JavaScript into uh the safe by bit transaction user interface. uh so that when um by bit users the bybe representative wanted to do a transaction uh with this user interface um first they blind signed uh a transaction and so they didn't saw

that uh there was an um issue that happened in this interface because they didn't know what they were signing so there were several types of issues here uh first the fact that uh safe developer uh has been u has been hacked in a way. So it's very important to uh keep an eye on your credentials. So when you work for a company to be sure that you rotate keys that you uh have um a good uh password management etc. And then also the second point of this attack is that uh the these users have blind signed a

transaction which mean that when you have when you sign a transaction uh you can for instance only see the hash of the transaction. So it's just a exad decimal number which didn't g give you a lot of information about what you're doing. And that's why uh at leger for instance we work a lot on a clear signing uh which is an initiative to provide to the user uh who is signing a transaction all the details of uh what he's doing. uh so the amount that is being sent uh the function that is being called if if it is a smart contract the the sender and the receiver etc. And uh

yeah it's a bit sad that like until now we didn't have this type of standard and a lot of people were just blind signing a hash and uh yeah signing this transaction like this. So yeah, this example gave us a lot of um um reflection and we talked a lot also in this EOS in the ecosystem to to so that it doesn't happen anymore. However, is it's always good to deep dive this type of attacks uh and to understand why they happen. I think Solen told me that you are somehow aware of the site wrecked.

where you have a leaderboard of all the attacks that uh happen in uh like in currently. Uh so you can see the the biggest attacks. It's called wrecked wrecked news and you go in the leaderboard and you see all this sad things happening but it's always a good source of knowledge. Um yeah so that's about just a little um thing about the front ends and also to to finish because we will be not talking about smart contract because I think you will have also other interesting um uh people who will come uh to talk a lot

about the smart contract security while we talk about it and now just to focus also on the infrastructure because it's a topic that people don't really address often I would say um just uh well just this little um analysis that it's a really personal analysis. It's all only for for me my point of view. You have of course the factual number of nodes and uh you can compare uh the different blockchains and the different uh number of validators that they have. Then uh one thing to keep in mind is that um uh there is an

attack that is called the 51% attack which consists of taking uh advantage of half of the network and once you do that you take the the the control of of the blockchain because if you have uh control of half of the nodes of a blockchain you can theoretically write whatever you want on the blockchain because you have the majority and potentially You can uh yeah you can you can write uh you can suggest something and the other will follow. And this type of attack is not really realistic anymore because we have blockchain with a relatively big number of nodes and it costs a lot to do this kind of attacks

of attack. But still it's interesting to look at the decentralization of these different blockchain to see um how uh how how is being um orchestrated how it's being uh handled by the foundation by the involved people and it gives you a view of uh what's behind the technology that you are um using. uh if we focus on uh Ethereum uh after the merge that was the big event that happened in September 2022 where the blockchain the the Ethereum client split in two um so you don't have one client I call them software clients I don't know

if everyone is aware but it's it's just another word for for node because a node is composed of two uh software clients one that is related to the beacon chain uh that we call the beacon node and the other that is related to the execution um the uh the execution chain or the so that we call it the execution and giant that's where all the calculation is done all the calls to smart contracts are done and uh that's really the the machine that uh where the calculation are done and on the other side the beacon chain is where the cons the consensus is uh is done. So uh we choose

who writes in the big register of the blockchain etc. And um this is interesting because that made appear different types of uh software clients the uh with different executions and written in different uh languages. uh in the consensus client you have a lighthouse written in rust pris written in in go uh so different languages that are used and you can see also the um the diversity of the usage which mean uh on the network uh on 100% of the network how much of the nodes are lighthouse

node or how much are pris nodes and it's the same for execution clients and what I want to to underline here because we talk about security and web three security is that there are different type of models uh for the security of a blockchain. Ethereum has chosen to have a diversity of nodes. So uh the hypothesis here is that if one client is down because there is a vulnerability that is found the other clients uh software clients can uh can work and take the overhead uh by the time that this fix is done on the Bitcoin blockchain for instance which is older

of course um there is another choice that has been done is that all of the chain um relies on Bitcoin core like I don't have the exact number but it's above 90% of the network is made only of one client software clients that is called Bitcoin core and it's supposed to be um uh secure enough because a lot of people have reviewed the code etc. So it's just to underline that the security model and the security threats are not um considered the same way on all the blockchains. And it's also interesting to to look at how the blockchain that

you uh are interested in uh tackles uh this this issue this issue. It can be an issue but tackles this uh topic to be question in fact we have two questions that is the same is like when a website is malicious or we can get information about it like be sure if we click on it it's safe the ledger extension is working for that no the a website you said like for example when we have a website um And uh we want to know if this website is legit. Um how we can um know know that the ledger

extension play a role about it? No. Um so the we have a transaction check uh that is a service that we have announced yeah several time ago. uh which helps you to know uh if the transaction that you do is uh potentially uh going or interacting with malicious code or mal malicious sources. But uh this extension is to analyze your transaction so that you don't blind sign something or so that you don't execute a smart contract that is malicious. uh this is what our uh transaction check um tool uh does to to help you. But if the question is

about uh any website that is on internet uh I mean uh it's uh we we don't provide this specific service because it's a very general service. uh I would recommend to verify very much the URL uh to see if there is no uh strange characters or uh an extension that is not uh that doesn't seems to be original. You really need to look carefully to the extension. You can Google it also. There are other website that specialize on on this but it's like it's really web two

related kind of general. So I would advise to do that. Probably we can talk a bit about airdrop like I mean you can see when you scroll onx that you can get like how you can claim a hairdrop but in fact it's like a fake website that going to just take all your funds so be aware about it that some scam happen um and uh yeah it's on the regular basis so just be aware yeah I think you you have to do a lot of research when you're claiming a airdrop. Uh you have to Google everything about this. Uh see if there is a telegram, discord, the websites, uh

people who have written articles about this. Uh the profile of the people who launch it. Um from my side, I I try to be very to to look very closely to all these details because yeah, you can you have a lot of scams. um the website is not enough uh at all. Um so you have to double check everything to do a lot of uh ozins uh and uh yeah there there is not really miracle solutions. Um I guess yeah you can connect with the community that you are in like here web threeack to ask if someone else has done this before. So yeah do a lot of research. Exactly.

Thanks. Okay. Yeah. So, uh that was just about the GUM and the uh the software clients. Um and we are heading a bit to the end of the presentation with uh some several additional um things. Um you maybe when you are or will be developing smart contracts and you would like to um deploy them on any blockchain, you will need uh what we call a a node as a service or or provider uh to connect to this blockchain because you will not install a node software node on your computer and through it connect to the

blockchain. You need a an API. So the most known are probably Infura alchemy. Uh what you just need to to understand is that they are centralized services. So when you go through infura through alchemy, you go from the decentralized world to the centralized world and then you go to the blockchain which is centralized again. But uh sometimes it's not always obvious. Everything in the blockchain ecosystem is not decentralized. The blockchain is decentralized. many of the additional services are not. So just be aware that uh these are points of centralization if you choose to use them is good but you

have to be aware of that. Uh same for ENS domains uh which are very nice services and improving a lot the um user experience. Um however they are also centralized service uh that u um decrease your anonymity on on this uh in this ecosystem. So it's good but uh try to have several accounts if you have one ENS try to have other uh public addresses that are not uh related to ENS domains to kind of have separate identities. This is what we we talk a lot in in security in digital security

is to have se separate separate uh digital identities so that everything is not uh related to you to one identity that's the the last and uh the last advice I can give you or maybe not other advices you can if you want to continue uh to deep dive security web three security there's a lot of resour resources on securum very very nice uh website, YouTube channel and uh and you and Discord. There is a good also a newsletter that I check very often for years now blockchain thread intelligence that summarize every two weeks or every

week what happens different courses that I think you will meet you will discover soon and also already we are already on it already on it perfect so you'll know everything and uh there are also funny challenges security challenges on platforms of bug bunches like Imunifi, Codorena, Cantina or Sherlock. Uh so yeah, go for it and this is how you learn things is by doing. So yeah, encouraging you to to go there and to uh to see all these things. Thank you for listening and I hope you learn a few things. Pretty huge. Thank you for um this

presentation, Karolina. Um so I think we already um reply to all question uh during uh during the the presentation itself. Um so if you have anything else to what kind of cyber security measure do you use personally measure? Oh, it's what I said is like for personal um yeah to personally you it's what I said it's a separate digital identities having a good password manager do not

write your password on a piece of paper that you have on your bedroom there are good solutions uh that you have to pay for that for that I think we we are in the world that is becoming uh more and more digital and for that to better protect yourself um it's not do not take security for granted and if sometimes you have to pay for a security solution it's I I I consider it today normal and have also a Google drive or an overdrive that is where you store sensitive data that is uh secure enough so do research about maybe overdrives that can give the services and uh Yeah, be aware of what

you post online. All these type of uh things can help. All right. Nice. Um so thank you again and probably someone else uh wanted to talk about leger itself. Um so I don't know if he's here. Ah, are you there? Oh yeah, I'm here. Yes. I also wanted to to bring someone from the HR team to the session but unfortunately uh they are not uh available on that slot. Um so what I can do is after um this uh talk feel free to uh to visit uh our LinkedIn

page. Um normally every open positions that could uh bring some interest to you or listed there. Um on top of that uh I don't have that much to add uh regarding what Karolina said. It was it was perfect. Uh but we are reachable and uh if you have any questions or any specific needs feel free to to ping Sen and Sen will come back to us for example. Uh and that we also have other sessions in coming this year. So this is the first one but uh we'll continue to to move on and uh until then feel free to uh to come into these f future

sessions and uh keep in mind your questions until then if you want and thank you again Sen for for everything. Oh thanks to you. Thank you. Um so yeah basically we're going to have another session that's going to be on May June something like this more on the technical side. Um when I said on the technical side is for the a live coding session something like this. Um and so yeah uh just that and then um after after uh yes so we have a few ledgers um so feel free to like you you know what you have to do um internally for that to claim your ledger um and then you're going to receive it uh on June 2. So

thanks again everyone for coming. Uh thanks Karina Cra for this session. Hope it was great and uh we keep in touch anyway. If if you have question, Karina is on the telegram too. So feel free to reach out to her. Nice. Yes. Thank you very much for having me too and yeah, see you on Telegram. Bye. Bye bye. Bye bye.