Ron Quaranta

In 2009, I represented the breached company in SEC v. Dorozhko — one of the SEC's first hack-and-trade cases. Second Circuit: deception is still deception, even without a fiduciary duty. Sixteen years later, crypto is learning the same lesson at scale. Reporting puts a Binance multi-chain hot-wallet drain near $6.3B — ~$2.8B frozen after the fact, with a material amount still able to move. Months earlier, a frontier AI model found a four-year-old Zcash Orchard soundness bug that had survived prior audits. Different attack surfaces. Same gap: we treat "secured" as a status, not a process. Five moves that would actually raise the floor: 1. Continuous adversarial review — not a one-time audit sticker 2. Safe harbor / coordinated disclosure for researchers 3. Freeze-ready issuer & custodian playbooks (minutes, not days) 4. Independent attestation of key management & signing flows 5. On-chain monitoring that treats "still movable" funds as an open incident June piece on the Orchard finding: lnkd.in/eS4SruMw What would you add? #Blockchain #Crypto #CyberSecurity #Crypto #Cybersecurity #Blockchain #Crypto #Cybersecurity #Blockchain