This report summarizes our findings, covering 6 distinct areas:
1. User experience (UX)
Issues that affect users' ability to securely manage private keys, interact with onchain applications, and sign transactions.
2. Smart contract security
The security of the smart contract components of Ethereum applications, and the lifecycle of software production that shapes them.
3. Infrastructure and cloud security
Issues with the infrastructure (both crypto-specific and legacy) that Ethereum apps depend on, like L2 chains, RPCs, cloud hosting services, and more.
4. Consensus protocol
The security properties of the core protocol, which secures the Ethereum blockchain itself from attack or manipulation.
5. Monitoring, incident response, and mitigation
The challenges users and organizations face when responding to security breaches, particularly in recovering funds or managing the aftermath.
6. Social layer and governance
Ethereum's open source governance, community, and ecosystem of organizations.