Exploit surfaces
Identify system components, trust assumptions, abnormal signals, and likely points of failure.
Signature cybersecurity program
The system is under attack. What does your team do next?
Blockchain Attack Lab is a facilitated tabletop simulation that teaches security, governance, risk, and incident response through decisions participants have to make together.
01 / THE EXPERIENCE
Security education with consequences.
No generic slide deck. Participants work the incident.
Teams receive an evolving scenario involving a distributed system, a suspected exploit, incomplete information, conflicting priorities, and time pressure. They have to identify what is happening, determine what matters most, assign responsibilities, communicate decisions, and build a defensible response.
The program makes complex risks tangible without requiring every participant to write code. Technical and nontechnical participants can contribute through analysis, operations, communications, governance, legal reasoning, finance, or executive decision-making.
Smart-contract risk
Examine how code, bridges, permissions, oracles, and dependencies can create cascading exposure.
Decision failures
Work through multisig, DAO, access-control, escalation, and operational-security problems.
Team coordination
Prioritize actions, communicate with stakeholders, preserve evidence, and defend the recovery plan.
Simulation flow
New information changes the room.
The facilitator releases incident updates as teams investigate, forcing participants to reassess assumptions and act with incomplete information.
01
Brief
Meet the system, team roles, known facts, and operational stakes.
02
Signal
Review the first indicators of compromise and competing explanations.
03
Escalate
Respond as losses, pressure, governance conflict, or public scrutiny grows.
04
Decide
Choose containment, communication, recovery, and accountability actions.
05
Debrief
Compare team reasoning to the technical, operational, and governance lessons.
Delivery formats
Built for the room you have.
Scenario complexity, terminology, roles, and debrief depth are adapted to the audience.
Rapid tabletop
A high-energy introduction for conferences, student programs, and short professional sessions.
Full incident lab
Deeper investigation, more injects, clearer team roles, and a structured response presentation.
Custom simulation
A tailored scenario, pre-brief, multiple rounds, expert debrief, and organization-specific learning goals.
Cybersecurity and computer science students practice systems thinking, threat analysis, and team response.
Finance, business, and risk students see how technical failure becomes operational, liquidity, governance, and reputational risk.
Professional and leadership teams explore decision rights, communication gaps, escalation, and resilience.
Policy and public-sector audiences gain a grounded understanding of how distributed systems fail and what responsible response requires.
02 / AUDIENCES
One incident. Multiple lenses.
03 / PROGRAM HISTORY
Developed for real student readiness.
WVBF delivered Blockchain Attack Lab as a featured technical session during Marshall University's CyberCon Student Readiness Workshop in March 2026. The 60-minute simulation introduced students to real categories of blockchain security threats and infrastructure risk modeling.
The program can now be adapted for universities, cybersecurity centers, student organizations, workforce programs, conferences, companies, foundations, and public-sector teams.
Run the incident
Put your team under useful pressure.
Tell us the audience, available time, and learning goals. We will recommend the right Attack Lab format.