Crypto Security Shifts Focus from Code to Human Vulnerabilities

Security breaches in crypto are no longer solely about code errors like Solidity vulnerabilities. The recent incident where Ledger's Connect Kit was compromised via a malicious NPM package, resulting in a loss of over $600,000, highlights the evolving nature of threats. Human factors such as social engineering, careless use of copy-paste, and compromised communications channels are now primary attack vectors. Despite many projects conducting automated code audits, they often overlook essential security practices like regular phishing drills, implementing role-based access controls, and enforcing strong authentication measures such as password managers and 2FA. Neglecting these basics leaves space for small mistakes to lead to significant losses, especially when someone in the team inadvertently clicks on a malicious link.