Web3 Security Roundtable Forum Focuses on Hardware and Accomplice Innovation

Recently, a roundtable forum focusing on "Web3 Wallets and Accomplice Security" was held at the Global Web3 and AI Summit. The forum explored the construction of a more secure and scalable Web3 asset protection mechanism from the underlying perspective of hardware and system software.

The guests participating in the discussion include executives and founders from several well-known technology companies. They engaged in an in-depth discussion around topics such as the pain points of user security in Web3, advanced custody architecture, and the challenges and breakthroughs of the open-source ecosystem.

The host pointed out in the opening: "The security of private key custody and Web3 wallets heavily relies on the security of devices and hardware, but discussions about the underlying system and hardware security are not common." He emphasized that current discussions on Web3 security often focus on on-chain protocols and smart contracts, while the decisive role of underlying hardware and system architecture is often overlooked.

Experts from a certain tech giant shared their team's technical architecture in high-security digital asset custody, including partitioning and cold storage signing processes based on EAL5+. They specifically introduced how the offline signing orchestrator system supports bank-level custody services.

Another participant approached the issue from a practical standpoint, pointing out through examples that the existing custody models of "delegated custody" and "self-custody" both expose systemic risks. He further introduced a solution based on "distributed custody" and MPC-TSS technology, emphasizing the application value of a flexible and scalable signature structure for both enterprises and individual users.

A founder started by discussing the practical challenges of open-source technology, sharing his team's practical experience in multi-terminal computing and local security isolation, and calling on the industry to think more systematically about the openness and credibility of the underlying architecture while ensuring user experience.

The CEO of a security company analyzed the key bottlenecks and countermeasures in current hardware custody solutions, drawing on his years of experience in hardware security modules (HSM) and key management. He stated that hardware trust boundaries are crucial when building a global digital asset infrastructure.

In discussions about the future forms of Web3 wallets, guests generally believe that composable, modular multi-signature architectures will become the mainstream trend, and balancing user experience with security is the core challenge. An expert added: "Financial enterprises have become accustomed to using dedicated hardware (such as HSM) for private key and signature management; relevant security assessments, such as EAL and FIPS, are also widely accepted by regulatory agencies. However, these assessments are not specifically designed to verify the security of blockchain signature implementations, so the level of security protection these systems provide for digital assets still needs to be audited by professional blockchain security companies." He pointed out that "托" is essentially an architectural design issue rather than a single technology stack. An ideal custody solution should effectively prevent operational errors through system mechanisms while ensuring users have a moderate degree of operational freedom.

In addition, regarding the role of open-source software in Web3 hosting, the guests expressed a cautious yet optimistic attitude. Some experts pointed out the legal gaps and market barriers faced by open-source chip design, calling for the industry to make further progress in security and transparency. Another expert also explored how to achieve module-level open-source isolation without sacrificing performance, starting from the perspective of operating system-level security.

At the end of the forum, the host concluded: "The underlying technology of private key custody and wallets is still evolving, and we look forward to providing verifiable, user-trusted security solutions through collaboration in the future."

This roundtable forum provides a new perspective on Web3 security, emphasizing comprehensive security considerations from underlying hardware to system architecture. With the continuous advancement of technology and the gradual clarification of the regulatory environment, the industry looks forward to developing more secure and reliable Web3 asset protection solutions.