By Nick Percoco, Chief Security Officer at Kraken
Crypto conferences are expanding annually, drawing participants from all corners of the globe. Whether in New York, Dubai, or Singapore, these events allow for invaluable interactions within the cryptocurrency community. Such gatherings signify that cryptocurrency is on the cusp of significant mainstream acceptance.
However, a concerning trend has surfaced alongside this growth: personal security practices at crypto conferences have been largely overlooked. This issue became more prominent even before the alarming cases of high-profile kidnappings. Members of the crypto community are increasingly bold in sharing details about their assets and significant trades in public environments.
The essence of cryptocurrency revolves around the idea of self-banking. Yet, achieving true financial independence is challenging—if not impossible—without prioritizing both personal and operational security measures.
The dedicated security team at Kraken is actively monitoring this situation during industry events. Here’s a summary of their observations and important recommendations for attendees:
Frequently Overlooked Situational Awareness
While exploring networking spaces and exhibit halls, our team has frequently noticed unattended laptops from well-known crypto projects left open and accessible. Additionally, many phones have been left unprotected on tables, even though wallet notifications can be seen coming in.
If you’re involved in the crypto sector, your devices are more than just phones or laptops; they serve as vaults for your assets and your employer’s operations. Always keep your gadgets nearby and secured when they’re not in use.
Excessive Sharing of Wealth and Trades
One of our colleagues stepped out of their hotel room one evening, a few miles from the conference venue, and overheard multiple attendees discussing high-stakes trades while prominently wearing their conference lanyards that displayed their names and companies.
Even if you feel that no one is eavesdropping, it’s essential to act with discretion to safeguard yourself and those around you.
Insecurity of Public Spaces
Similar to how you wouldn’t freely trust the WiFi at a crowded café, extra vigilance is crucial at crypto gatherings. Public networks are susceptible to spoofing and infiltration, and these events often attract tech-savvy individuals, including potential hackers. Just one individual with ill intent can exploit an open connection.
Caution with QR Code Scanning
QR codes are ubiquitous at cryptocurrency events—seen in giveaways and demos—but each scan carries the risk of introducing malicious smart contracts that could potentially drain your wallet. A mere sticker swap can allow a bad actor to replace a legitimate QR code with a counterfeit, jeopardizing the security of numerous attendees.
While we haven’t heard of recent incidents, the threat still exists. A safer strategy is to utilize a burner wallet containing only limited funds specifically for conference purposes. This way, if an issue arises, your principal holdings will remain secure.
Exercise Caution in Trusting Others and in What You Share
Not everyone sporting a conference t-shirt is who they claim to be. Fabricating cover stories and registering under false identities is relatively easy at these events. It’s advisable to verify individuals’ identities and to limit sensitive discussions to secure channels or follow-ups after the event. If an offer appears too good to be true, it likely is.
Moreover, our team recognizes that there are subtle but significant risks associated with attending events. Always monitor your food and drinks closely; while tampering is rare, it can occur, especially in high-pressure situations.
Similarly, unauthorized access to your devices is more common than people think. A well-known tactic involves “juice jacking,” where harmful USB charging stations are used to implant malware or steal data. Our straightforward advice is to always use your own charger and cable. If this requires a detour back to your hotel, it’s a minor price to pay to safeguard your digital assets.
Upholding Strong Security Practices as Crypto Grows
As our industry becomes more visible and mainstream, it attracts more malicious actors, and complacency can pose a significant threat to our collective advancement. It’s essential to return to the basics. In the current high-stakes climate, being complacent about crypto security isn’t just a personal risk; it can affect our entire movement.