Decentralised digital security: Code, crisis, community

This epilogue returns to the guiding question, 'what can decentralised technology communities teach us about digital security?’, and argues that while decentralised security practices do not offer a ready-made solution, they provide a powerful lens for reimagining how we organise, incentivise, and govern security in a world where insecurity is the norm rather than the exception. This lens reveals repeatable patterns that underpins decentralised responses to insecurity: (i) Infrastructure and actors that renders insecurity legible and makes action possible, (ii) norms that guide who gets to act, under what conditions, and on whose behalf, (iii) controls that anchor best-practice responses and coordination mechanisms, and (iv) feedback loops that translate lessons learned into updated tools, expectations, and community standards.

This chapter tells the story of the largest hack in history. Drawing on insider perspectives from within the security community, it traces black hats, white hats, and many shades of grey in action, revealing how incident response is coordinated across the ecosystem, when it succeeds in protecting the interests of end-users, and when it fails due to selfish ambition. The chapter underscores the enduring reality that insecurity is a permanent condition. It also reveals the emergent infrastructure, norms, controls, and feedback loops that scaffold how decentralised communities collectively respond to insecurity.

This chapter moves beyond individual hacks and exploits to examine how decentralised security operates at scale, with a focus on the intersection between cryptocurrency security and the geopolitics of blockchain infrastructure. It interrogates physical security, organised crime and state-backed actors – particularly the North Korea-linked Lazarus Group – as they target decentralised finance systems. By tracing how these Advanced Persistent Threat (APT) actors exploit blockchain technologies for illicit purposes, it reveals the broader implications for global security and policy. In doing so, this chapter shows how geopolitical tensions increasingly manifest through digital infrastructures, shaping the vulnerabilities, responses and power dynamics that characterise the insecurity of blockchain ecosystems today. In doing so, it shows how blockchain systems function as geopolitical battlegrounds where sovereignty, accountability and security are contested and coordinated.

Security in decentralised systems relies not only on technical robustness, but also on the interaction of social, economic, legal and institutional arrangements that enable coordination across diverse actors and make insecurity legible. This chapter examines how security is collectively produced and governed in decentralised contexts, focusing on the infrastructures that enable coordination.

The previous chapters have traced the historical, ideological and contextual foundations of blockchain security, from the early visions of hackers, cryptographers and Cypherpunks to the emergence of decentralised protocols and the burgeoning security landscape. This chapter introduces a new protagonist in the security landscape: the blockchain white hat hacker. Far from operating in the shadows, these actors play a vital role in the moral, political and economic landscape of blockchains by helping to safeguard decentralised systems. This chapter examines the practices, motivations and incentives – financial, moral, and reputational – that drive white hat activity, highlighting how these individuals contribute to vulnerability disclosure, incident response and the overall resilience of the blockchain ecosystem. In doing so, it situates white hats as key stakeholders in the decentralised security landscape.

This chapter examines the current state of blockchain security—or more accurately, persistent insecurity. Despite ideological commitments to cryptographic guarantees and protocol-level integrity from project founders, blockchain systems remain vulnerable. Security is not guaranteed by design but is continuously negotiated by a patchwork of stakeholders. Drawing on ethnographic analysis of security incidents as well as publicly available data on high-profile exploits, this chapter maps key attack vectors, threat actors, and stakeholders. It presents a matrix of the decentralised security ecosystem, characterised as much by fragmentation and improvisation as by technical sophistication. This ecosystem has evolved to include software auditors, bug bounty hunters, protocol security teams, white hat hackers, user education initiatives, insurance providers, policy makers, and more. These stakeholders operate according to various incentives and an ethos of decentralisation that complicates traditional notions of responsibility, liability, and enforcement across protocols, projects, and users.

Security is a prerequisite for digital economies as it lays the foundational conditions for trust, exchanges of data and coordination. This chapter provides an intellectual history of digital security, setting out conceptual elements that are fundamental to understanding security in decentralised digital context. It is organised according to three historical eras.1 The first era is defined by the computer hackers of the 1960s, who demonstrated hacking as a counterculture of individual freedom through making and breaking computers. The second era revolves around the public key cryptographers of the 1970s, as well as the Xanadu and American Information Exchange (AMiX) communities of the 1980s, who contributed to early ideas on the development of economic commerce, highlighting the need for secure means of digital exchange. The third era highlights the Cypherpunks of the 1990s, a disparate group of privacy advocates who authored the ‘Cypherpunk Manifesto’ and used computer code and cryptography to build secure, decentralised digital infrastructures. Their aim was to wield the power of cryptography and computers to resist state and corporate surveillance and enable individual autonomy.

In the digital age, security is often imagined as a fixed state – something that can be achieved through the right combination of technology, policy and enforcement. The assumption has been that well-funded, centralised entities – whether tech companies, governments or cybersecurity firms – could safeguard digital environments through proactive risk mitigation and regulatory oversight. This model has critical limitations. Large-scale data breaches, corporate surveillance and vulnerabilities in cloud-based infrastructures have demonstrated that centralisation of digital infrastructure introduces systemic risks.Decentralised technology security communities approach security not as a fixed end goal but as an ongoing process of adaptation, negotiation and contestation. Security in these contexts is as much social as it is technical, shaped by ideological commitments to cryptographic autonomy, the practical realities of infrastructural vulnerabilities and the constantly evolving landscape of cyber threats. This book examines how decentralised security is organised within blockchain ecosystems, tracing the structures, actors and motivations that underpin security practices in environments where traditional mechanisms of enforcement and accountability are limited. It explores how users, project teams and protocols collaborate – often across borders and jurisdictions – to confront both localised incidents and global security challenges.