Guest
Brandon Arvanaghi
Brandon Arvanaghi, Security Engineer at Gemini: Covering The Popular Crypto Hacking Techniques
- Elementary security requires distinct passwords for every site and relies on password managers (1Password, Dashlane) rather than reusing credentials across platforms. - Two-factor authentication via SMS and phone porting (SIM swapping) creates critical vulnerabilities because attackers can redirect recovery codes and account access by porting your phone number to their device. - Medium-tier security uses authenticator apps like Authy and Duo instead of SMS, generating codes tied to your physical device rather than your phone number; however, multi-device support features should be disabled to prevent SIM swap attacks. - Expert-level security employs security keys (YubiKeys, Mac Touch Bar) that use public key cryptography, making spoofing impossible even if attackers access your phone or email. - Voicemail PIN vulnerabilities allow attackers to remotely access voicemail without controlling your phone number, then retrieve password reset codes read by automated systems (relevant for WhatsApp and other services). - Hardware wallets require trust in the manufacturer but offer self-custody; cold storage and geographic separation of funds at institutional providers like Gemini mitigate single-point-of-failure risks.
Brandon Arvanaghi: Building the Gemini Dollar
- Brandon Arvanaghi, security engineer at Gemini, explains the Gemini Dollar as the first regulated stablecoin, backed one-to-one by US dollars held at State Street and audited monthly by BPM. - Regulated stablecoins differ from unregulated alternatives through independent audits, custodial partnerships with established institutions, and governmental approval from the Department of Financial Services. - The Gemini Dollar operates as an ERC-20 token on Ethereum; users can peer-to-peer transfer it freely, but fiat on- and off-ramps require KYC/AML only at Gemini (no accreditation needed). - Asset freezing and transaction reversal capabilities are built into the contract with transparency mechanisms: time-locked pending states and multi-signature verification prevent unilateral changes visible only to competitors. - Use cases include efficient large-sum transfers (1,200% cheaper than wire transfers), enabling dApp fundraising, institutional participation, and capital flight in high-inflation economies where citizens seek unseizable, stable-value assets. - Arvanaghi's controversial stance: Ethereum should reject proposals to revert transactions caused by smart contract bugs, preserving immutability and incentivizing proper auditing before deployment.