2026-02-17 –, Auditorium
Practical incidents + ops learning. Panel may also include “hot takes”.
Crypto incidents don’t behave like traditional breaches. They unfold in minutes, span chains, and can cause infinite cascading damage along the way. Most teams are still improvising without training or realistic strategies in place. This panel brings together leading DeFi security teams to share practical incident lessons, working incident pipelines, and response playbooks that actually hold up under live attack conditions.
The outcome: practical insights, candid stories, and debate on what the industry must fix next.
Incident Response is where the digital economy defensive layer succeeds or fails, but it is still underdeveloped across the industry. This panel focuses on turning MDR/IR from a reactive approach into reliable operational capability.
We’ll dig into:
What the first 60 minutes of real incidents actually look like and why they matter
How teams are building MDR workflows that merge on-chain + off-chain telemetry
How playbooks and containment strategies can change the outcome
What the industry consistently gets wrong about response today
How collaboration and threat intelligence meaningfully reduce impact
Attendees will leave with actionable frameworks, hard-earned lessons, and new thinking on how we can collectively raise the baseline of defense in crypto.
Panelists (proposed): representatives from Cantina, Hypernative, and ChainPatrol
Moderator: Mike Leffer, President of Cantina/Spearbit
Cantina and Spearbit work with financial services and blockchain organizations to protect the world's most critical and complex code by combining a world-class security researcher network with purpose-built tools, delivering scalable and effective solutions pre-deployment through runtime all in one platform.
Sharon leads strategic product development and programming at Cantina, bringing bespoke security programs to teams across web3 and web2.