no. they verify the account. they do not verify the human pushing the code.
this is how the $7m trust wallet hack happened. hackers didn't break the encryption. they hijacked a session.
google saw a logged-in user, it didn't ask "is this actually the developer?"
this is the gap billions official profiles fills
it moves us from "login security" to "action security." imagine if every code push required a biometric signature. a face scan linked to a government id.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
"but doesn't google verify the devs?"
no. they verify the account. they do not verify the human pushing the code.
this is how the $7m trust wallet hack happened. hackers didn't break the encryption. they hijacked a session.
google saw a logged-in user, it didn't ask "is this actually the developer?"
this is the gap billions official profiles fills
it moves us from "login security" to "action security." imagine if every code push required a biometric signature. a face scan linked to a government id.
password stolen? doesn't matter. cookie hijacked? doesn't matter.
with the billions sdk, you can enforce a rule: "critical updates require a biometric signature from a verified profile"
you can't spoof liveness. you can't fake the face.
identity is the ultimate firewall. @billions_ntwk is building the standard that prevents the next hack.