aol.pm

How I use a JSON Deserialization 0day to Steal Your Money On The Blockchain

DEF CON 29 · 2021

Presenter: Hao Xing · Zekai Wu

Attributed source ↗ · Plaintext record

Independent InfoconDB index. Title: source supplied. Credit: research dataset; independent index title match. Delivery: Not independently verified.

Source date value: 2021-07-30. This is retained as source metadata; recording dates or placeholder timestamps do not establish a session’s actual date.

Rights: Metadata and source links only; abstracts, biographies, transcripts and media not republished

Research dataset: Lukas Walter, Clemens Sauerwein, Daniel Woods, InfoSec.pptx, https://doi.org/10.5281/zenodo.15989593, CC BY 4.0 https://creativecommons.org/licenses/by/4.0/. Changes: metadata extraction, exact-match reconciliation and uncertainty flags. No endorsement implied.

Inspect structured metadata and provenance
{
  "id": "defcon-index-29-8564840276d2908e",
  "title": "How I use a JSON Deserialization 0day to Steal Your Money On The Blockchain",
  "presenters": [
    "Hao Xing",
    "Zekai Wu"
  ],
  "event": "DEF CON 29",
  "year": "2021",
  "source_url": "https://infocondb.org/con/def-con/def-con-29/how-i-use-a-json-deserialization-0day-to-steal-your-money-on-the-blockchain",
  "source_kind": "Independent InfoconDB index",
  "source_file": "infocondb-def-con-29.html",
  "rights": "Metadata and source links only; abstracts, biographies, transcripts and media not republished",
  "delivery_status": "Not independently verified",
  "title_status": "source supplied",
  "presenter_status": "research dataset; independent index title match",
  "media": [

  ],
  "provenance": [
    {
      "file": "infocondb-def-con-29.html",
      "url": "https://infocondb.org/con/def-con/def-con-29/",
      "source_kind": "secondary independent index",
      "sha256": "287918024a3ef9a669b1ee2517c87afa8a3f35beb4304381fe459055da2aa898",
      "checked": "2026-10-16T03:48:21Z"
    },
    {
      "raw_title": "How I use a JSON Deserialization 0day to Steal Your Money On The Blockchain",
      "raw_agenda": "30.07.2021",
      "date_conflict": false,
      "url": "https://doi.org/10.5281/zenodo.15989593",
      "file": "speaker_infosec.csv",
      "rows": [
        1693,
        1694
      ],
      "sha256": "e47480bc376a20292a4f6fd990be7b687f43ff0bfb861267c5533cebf3114d46",
      "attribution": "Lukas Walter, Clemens Sauerwein, Daniel Woods; InfoSec.pptx dataset; CC-BY-4.0; extracted metadata, omitted abstracts and automated classifications",
      "license": "https://creativecommons.org/licenses/by/4.0/"
    }
  ],
  "date": "2021-07-30",
  "research_credit_rows": [
    {
      "presenter": "Hao Xing",
      "role": "Security researcher",
      "affiliation": "Tencent Security Xuanwu Lab",
      "row": 1693
    },
    {
      "presenter": "Zekai Wu",
      "role": "Security researcher",
      "affiliation": "Tencent Security Xuanwu Lab",
      "row": 1694
    }
  ]
}

Coverage and source gaps

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.