This course is designed to provide participants with a foundational understanding of blockchain and Web3 technologies, emphasizing existing security risks and mitigation strategies and compliance, following the guidelines from the Web3 Risk and Security Management System (RSMS).
Date: 27 February 2026
Time 9:30am – 5:00pm
Format: Hybrid Mode (Cyberport and Online Webinar)
Language: English
Speaker: Dr. Kang Li, Chief Security Officer, CertiK
Lecture 1: Introduction to Web3 Security & Security-by-Design Principle
- Evaluating Blockchain Projects Security Risks
- Reviewing Historical Incident
Lecture 2: Web3 Fundamentals: Private Keys and Addresses
- Understanding Private Key Compromise Risk Lab
- Setting Up a Multisig Wallet
Lecture 3: Common Frauds and Social Engineering Threats in Web3
- Protecting Against Address Poisoning Attacks
Lecture 4: Introduction to Web3 Protocol and Smart Contract Security
- Identifying Vulnerabilities in Smart Contracts
Lecture 5: Web3 Monitoring, AML, Compliance, and Incident Investigation
- Crypto AML & Compliance
- Tracing Illicit Funds / Scam Investigation
Web3 Security Readiness Assessment
- Assessment reviewed by Web3 Security Companies (including CertiK)
For further training enquiry, please contact Ms. Lily Li at training@cyberport.hk
Dr Kang Li
Chief Technology Officer, CertiK
Dr. Kang Li was formerly the Chief Security Scientist and a Senior Director at Baidu Inc. Before that, he served in various leadership and consulting roles at cyber security enterprises and institutes, including the Institute for Cyber Security and Privacy at UGA, Intel, and Samsung. Kang was also a tenured full professor at the University of Georgia. Dr. Kang Li was the founding mentor of multiple CTF teams, including Blue-Lotus and Team Disekt. He is a frequent speaker at major security conferences, and he is also a DARPA Cyber Grand Challenge Finalist. He graduated with a Computer Science Ph.D. degree from OHSU and B.S. degree from Tsinghua University. He also holds a master’s degree from Yale Law School.
FAQ area empty
No classes available in this module.
No classes available in this module.
No classes available in this module.
No classes available in this module.
No classes available in this module.
Tech start-up with basic Web development knowledge is preferred
Gain a foundational understanding of blockchain and Web3 technologies and recognize the importance of the Security-by-Design Principle in ensuring robust security measures are integrated from the outset.
Learn about key security risks in the Web3 threat landscape: such as private key compromise, social engineering threats, and smart contract vulnerabilities, and learn to implement effective security controls and measures to mitigate these risks.
Gain practical skills for regulatory compliance and risk management: Master the use of tools for monitoring AML compliance and tracing illicit funds, essential for meeting regulatory requirements. Apply methodologies for on-chain monitoring, incident alerts, and compliance with regulations, in line with Web3 RSMS guidelines.