RCEing Your Way Into the Blockchain: Uncovering a critical vulnerability and taking over Decentralized Identity (DID) networks

Shaked Reiner

Shaked Reiner

CyberArk Labs


Abstract

The promise of Decentralized Identity (or DID) is to set us free from corporations owning our digital identity (be it Google, Apple, etc.) by distributing it to a blockchain. In this talk, we'll learn the fascinating technology behind DID and see how we were able to completely own one of the most popular DID networks currently active by uncovering a critical CVSS 10 vulnerability in it.

Speaker Info

Shaked Reiner

Shaked Reiner (@shakreiner) is a principal security researcher at CyberArk Labs focused on vulnerability research, OS security, and decentralized technologies. In his free time, Shaked likes to reverse engineer random pieces of software, solve CTF challenges and make cocktails.

Organizer

Organizer Logo

Partner Company

Partner Company Logo