Suggestions
Ido Ben-Natan
Security R&D Team Lead at Office of the Prime Minister of Israel
Professional Background
Ido Ben-Natan has carved out a distinguished career in the field of cybersecurity, leveraging his extensive experience in research and leadership roles within the Office of the Prime Minister of Israel. As the current Cyber Security R&D Team Lead, Ido plays an instrumental role in shaping national cybersecurity policies and strategies. His dedication to protecting sensitive national data and systems not only demonstrates his expertise but also illustrates his commitment to the security of Israel's digital infrastructure.
In his previous capacity as a Cyber Security Researcher at the Office of the Prime Minister, Ido contributed significantly to research initiatives that aimed to identify vulnerabilities and optimize defense mechanisms against sophisticated cyber threats. His analytical skills and research acumen propelled the creation of innovative solutions that have been pivotal in safeguarding Israel's information systems.
Ido's leadership capabilities were also highlighted during his tenure as a Course Commander, where he was responsible for training and mentoring new recruits in essential cybersecurity protocols and tactics. His ability to inspire and educate emerging talents in the field underscores his role as a thought leader and a mentor in the cybersecurity domain. Additionally, his experience as a Data Science Researcher further bolstered his skill set, enabling him to combine data analytics with cybersecurity concepts effectively.
Education and Achievements
Ido Ben-Natan’s academic background is reflective of his commitment to mastering the intricate field of cybersecurity. Although specific details about his formal education were not provided, his positions indicate a profound understanding of both cybersecurity principles and data science methodologies. His achievements in research and development have set a benchmark for excellence within the cybersecurity community.
Throughout his career, Ido has been an active contributor to multiple projects aimed at enhancing Israel’s security frameworks, demonstrating his persistence in pushing the boundaries of innovation within his field. He is known for cultivating productive discussions among peers and is often invited to collaborate on strategic initiatives designed to address current and future cybersecurity challenges. Ido's ability to connect complex concepts with practical applications has made him a respected figure not only in his organization but throughout the broader cybersecurity landscape.
Achievements
Ido Ben-Natan is recognized for his remarkable achievements in the cybersecurity sector, particularly in establishing key cybersecurity protocols that have been critical in shielding national interests. His contributions to the Office of the Prime Minister of Israel have fortified the protective measures surrounding vital national data, thereby reinforcing the integrity and security of governmental operations.
Moreover, his pioneering work in research has positioned Ido as an expert in identifying and mitigating security vulnerabilities, showcasing his prowess in both predictive analysis and real-time defense strategies. His leadership in training programs underscores his commitment to empowering the next generation of cybersecurity professionals, marking him as a pillar of knowledge and a guide for aspiring experts in the field.
Highlights
Web3 is being hit hard by front-end attacks, and most security solutions can't prevent them. This week Parcl became the latest victim.
Here's what happened. Attackers:
🏴☠️ Compromised Parcl's DNS records 🏴☠️ Took over its social media accounts 🏴☠️ Injected wallet-draining code into app.parcl.co 🏴☠️ Executed over 300 wallet-draining transactions within 3 hours
This attack comes on the heels of several other front-end incidents.
🍟 McDonald's Instagram hack that led to losses of $700k ⬛️ Squarespace DNS exploit that impacted Compound and Celer 📈 Equalizer DEX hack
Front-end attacks are increasing and highlight a glaring vulnerability in most web3 security solutions—reliance on static blocklists.
These static blocklists don’t protect against front-end attacks. They only protect against dApps that have already been used in an attack.
Blockaid takes a different approach.
Our solution uses continuous, internet-wide dApp scanning and threat intelligence to identify front-end exploits before they are used in attacks—often 24 hours in advance.
Because of this, no Blockaid-enabled wallet was drained during the attack. The biggest thing holding back web3 adoption is a lack of trust due to attacks like these.
Better security is the answer to building trust in web3.
I’ve spoken to dozens of web3 companies since WazirX got hacked for $230m. There’s one major blind spot everyone’s missing.
Blind signing transactions.
Picture this: You're handed a document in a sealed envelope. You're told it's routine, so you sign without opening it. Now imagine that document just cost your company $230 million.
That's essentially what happened to WazirX. Despite implementing several strong security measures: ✅ Multisig wallet with Gnosis Safe ✅ Whitelisted addresses through Liminal ✅ Ledger hardware wallets for WazirX signatories ✅ Liminal signatory approval
They missed one crucial point: 🚫 Blind signing transactions
This oversight allowed hackers to upgrade the Gnosis safe, transfer funds, and drain $230M in assets.
All because a signer couldn’t see the full details of what they were signing.
Raz and I talked to over 100 web3 companies before starting Blockaid and we realized transaction signing is the single largest attack surface.
That's why the first thing we built was transaction simulation and validation that offered full transaction details and malicious intent assessment.
WazirX should be a wake-up call for the industry. You can have all the security measures in the world and still be vulnerable to malicious transactions.
