umni's avatar
umni yesterday
Potential vulnerabilities Accountants, Accounting software, lawyers. Accounting software, Accounting firms and bitcoin specific accounting, could all be the next extremely low hanging fruit putting everyone at risk who follows the rules. There are roughly 55 crypto Bitcoin specific accounting companies 90% using web based apps with several of which have already been compromised but at least they said sorry. Many accountants try to look professional using online web portals for document upload and storage, some try to do it in house others outsource, regardless this is a huge honey pot and should be considered far more dangerous then low entropy attacks. One simply targets your coins the other physically targets everyone you care about. Secondary honeypot the lawyers: specifically family law and the requirements of prenuptial agreements and inheritance planning. Forcing specification of all assets held with location and ownership details. Most lawyers store physical documents in house, many will digitize but majority of firms outsource the responsibility the storage digital copies to third party providers. ........................................................................ The USA Accountant numbers: Small Firms: ~80,900 (Includes ~33,850 solo practitioners and ~47,000 firms with <10 employees). Medium Firms: ~1,000 to 1,500 (Firms with 11–100 employees). Large Firms: ~400 to 500 (Firms with 100+ employees, including the Big Four). Total Summary: Approximately 85,400 accounting firms. While ~85,400 firms exist, only about 20,000 currently handle crypto, and of those, roughly at least 12,000 lack the specific security infrastructure to prevent a targeted crypto-asset theft. Its better practice to assume all can be compromised. Bitcoin specific accounting software/web applications: At least 55 crypto bitcoin suppliers. Potentially with no standardized method of data storage. ........................................................................ The USA family law numbers: Approximately 55,000 to 60,000 family law practitioners in the USA actively draft or review prenuptial agreements and inheritance plans with over 60% of law firms now using these "secure" cloud-based portals as their primary method for sharing and storing active case files. #ideas #redteam

Replies (3)

umni's avatar
umni yesterday
Of course the best thing to do is not to put yourself in these situations in the first place.
Systemic risk in centralized finance, just like inflammation from grains in our bodies.
KPMG, Deloitte, and PwC are the real vulnerabilities, exploiting regulatory capture to strangle bitcoin adoption.