Amber Group：2023数字资产安全、合规与风险管理白皮书（英文版）（152页）.pdf

1、 1 2 3 TABLE OF CONTENT Recommendation I-Amber Group.9 Recommendation II-Amber Group.10 Recommendation III-Thoughtworks.11 Recommendation IV-Thoughtworks.12 Recommendation V-Slowmist.13 Recommendation VI-BlockSec.14 Recommendation VII-RigSec.15 Recommendation VIII-AnChain.AI.16 Recommendation IX-Ank

2、ura.17 I.Preface.18 1.1 Background and Purpose.18 1.2 Intended Audience.19 II.Operational Overview.19 2.1 Business Risks in the Industry,Digital Asset Business Concepts.19 2.2 Global Overview of Digital Asset Management.21 2.3 Digital Asset Business Characteristics.23 III.Security Risks and Challeng

3、es in the Age of Digital Assets.26 3.1 Security Challenge I:The changing dynamics of the chain and the ubiquity of security threats.26 3.1.1 Industry Pain Points and Security Threats.26 3.1.2 Story 1:The DAO Event Leads TO ETHEREUM Hard Fork.27 3.1.3 Story 2:Ethereum Client Parity Multisig Vulnerabi

4、lity,Over$150 Million Were Affected.28 3.1.4 Story 3:Phishing Attacks on OpenSea NFT Marketplace Users.28 3.1.5 Industry Security Solutions Practices.29 3.1.5.1 Web3 and Blockchain Security System Practices.29 3.1.5.2 Web3 Project Lifecycle Protection Practices.30 3.1.5.2.1 Web3 Project Lifecycle Se

5、curity Protection Methods.31 3.1.5.2.1.1 Development Preparations.31 4 3.1.5.2.1.2 Development Process Requirements.31 3.1.5.2.1.3 Items for Project Deployment Process.32 3.1.5.2.1.4 Project Operation Monitoring.33 3.1.5.2.1.5 Incident Response Handling for Projects.34 3.1.5.2.2 Practical Web3 Full

6、Lifecycle Security Protection Case Studies.35 3.1.5.2.2.1 Amber Group Case Study-Profanity“Vanity Address”Private Key Cracking Attack.35 3.1.5.2.2.2 AnChain.AI Real-World Case-Million Dollar DeFi Dark Forest Incident Response.36 3.1.5.2.2.3 BlockSec Field Case-Paraspace NFT Lending Protocol Operatio