Web3 Security Experts Discuss the Future of Wallet and Custodial Security

Recently, at a global Web3 and AI summit, several industry experts gathered to have an in-depth discussion on Web3 Wallet and accomplice security. This roundtable forum started from the underlying perspective of hardware and system software, exploring how to build a safer and more scalable Web3 asset protection mechanism.

The experts participating in the discussion come from different technical backgrounds, including digital asset infrastructure, deep computing, storage technology, and hardware security modules. They engaged in a lively discussion around topics such as Web3 user security pain points, advanced custody architectures, and the challenges and breakthroughs of the open-source ecosystem.

The forum host pointed out at the beginning that the current discussions on Web3 security often focus on on-chain protocols and the smart contract layer, while the decisive role of underlying hardware and system architecture is often overlooked. He emphasized that the security of private key custody and Web3 Wallets highly depends on the security of devices and hardware, thus it is necessary to conduct a more in-depth discussion from the perspective of system-level and hardware security.

Experts from a well-known technology company shared their team's technical architecture in high-security digital asset custody, including EAL5+-based partitioning and cold storage signing processes, as well as how to provide offline signing orchestrator system support for bank-grade custody services.

Another CEO of a storage technology company approached the issue from a practical standpoint, pointing out through case studies that the existing custody models of "delegated custody" and "self-custody" both expose systemic risks. He further introduced a solution based on "distributed custody" and MPC-TSS technology, emphasizing the application value of a flexible and scalable signature structure for enterprise and individual users.

Experts in the field of deep computing discussed the practical challenges of open-source technology, sharing their team's practical experience in multi-terminal computing and local security isolation. They called for the industry to think more systematically about the openness and trustworthiness of the underlying architecture while ensuring user experience.

Hardware Security Module (HSM) experts in the field of key management analyzed the current key bottlenecks and response strategies in hardware custody solutions. He stated that establishing hardware trust boundaries is crucial when building a global digital asset infrastructure.

In discussions about the future form of Web3 Wallets, experts generally believe that composable and modular multi-signature architectures will become the mainstream trend, and balancing user experience with security is a core challenge. Some experts added that financial enterprises have become accustomed to using dedicated hardware for private key and signature management, and related security assessments are widely accepted by regulatory agencies. However, these assessments are not specifically aimed at verifying the security of blockchain signature implementations, so the level of security these systems provide for digital assets still requires auditing by professional blockchain security companies.

In addition, experts have expressed a cautiously optimistic attitude towards the role of open-source software in Web3 hosting. Some pointed out the legal gaps and market barriers faced by open-source chip design, calling for the industry to improve on safety and transparency. Other experts discussed how to achieve module-level open-source isolation without sacrificing performance, starting from the perspective of operating system-level security.

At the end of the forum, the host summarized: "The underlying technology of private key custody and wallets is still continuously evolving. We look forward to providing verifiable and user-trusted security solutions through collaboration in the future."

The holding of this roundtable forum reflects the industry's high attention to Web3 security issues. As the regulatory environment becomes clearer and the technical complexity continues to rise, industry experts are working hard to provide cross-layer collaborative security solutions for developers, enterprises, and regulatory agencies to promote the healthy development of the Web3 ecosystem.