MITRE Reveals How Smart Contracts Are Broken.

MITRE has introduced a new cybersecurity framework called AAD APT (Adversarial Actions in Digital Asset Payment Technologies) designed to counter vulnerabilities in digital financial systems, including cryptocurrencies. This initiative continues the approach laid out in MITRE ATT&CK and is aimed at addressing current threats in the rapidly evolving digital asset sector. AADAPT is designed as a methodological base for systematically identifying, analyzing, and remediating potential threats associated with digital payment technologies. The framework is aimed at developers, regulators, and financial institutions, providing them with a common language and tools to understand and counter attackers. AADAPT is based on more than 150 sources from the public, private, and academic sectors, which allowed accumulating extensive experience from real-world cyberattacks.

AADAPT identifies and classifies the methods, tactics, and techniques used by adversaries against digital asset technologies, with a particular focus on vulnerabilities in consensus algorithms, smart contracts, and other key mechanisms of cryptosystems. This knowledge is presented in a matrix similar to MITRE ATT&CK, which describes adversary actions in the context of digital asset transactions. Some elements of AADAPT directly overlap with existing ATT&CK techniques, highlighting the continuity of the approach.
The rise of cryptocurrencies has led to an increase in sophisticated attacks, including double-spending schemes, phishing, and ransomware-based attacks. Small organizations, municipalities, and local governments that lack the resources to provide robust digital security remain particularly vulnerable. AADAPT offers tailored recommendations and tools that take into account the specifics of such financial market participants.

MITRE has introduced a new cybersecurity framework called AAD APT (Adversarial Actions in Digital Asset Payment Technologies) designed to counter vulnerabilities in digital financial systems, including cryptocurrencies. This initiative continues the approach laid out in MITRE ATT&CK and is aimed at addressing current threats in the rapidly evolving digital asset sector. AADAPT is designed as a methodological base for systematically identifying, analyzing, and remediating potential threats associated with digital payment technologies. The framework is aimed at developers, regulators, and financial institutions, providing them with a common language and tools to understand and counter attackers. AADAPT is based on more than 150 sources from the public, private, and academic sectors, which allowed accumulating extensive experience from real-world cyberattacks.

AADAPT identifies and classifies the methods, tactics, and techniques used by adversaries against digital asset technologies, with a particular focus on vulnerabilities in consensus algorithms, smart contracts, and other key mechanisms of cryptosystems. This knowledge is presented in a matrix similar to MITRE ATT&CK, which describes adversary actions in the context of digital asset transactions. Some elements of AADAPT directly overlap with existing ATT&CK techniques, highlighting the continuity of the approach.
The rise of cryptocurrencies has led to an increase in sophisticated attacks, including double-spending schemes, phishing, and ransomware-based attacks. Small organizations, municipalities, and local governments that lack the resources to provide robust digital security remain particularly vulnerable. AADAPT offers tailored recommendations and tools that take into account the specifics of such financial market participants.