Web3 security and education for the public benefit.

Many DeFi Protocols have decentralised using DAOs and token governance. This article explores the common vulnerabilities in the...

Zellic is proud to announce Masamune, a curated index of audit reports, bug fixes, and technical documentation of numerous protocols

Key takeaways Introduction Crypto drainers are malicious tools that steal digital assets like NFTs, and tokens from cryptocurrency wallets. They often use phishing techniques and leverage smart contracts to enhance their impact. Typically, users are tricked…

Discover how borrowing and redemption fees help safeguard decentralized stablecoins and prevent exploit scenarios.

A powerful method for a malicious hardware wallet to leak its secret keys.

A field guide on smart contract security best practices, for developers, auditors, and hackers. Smart contract security guidelines, security best practices, and educational resources in one place.

Learn about Solana program security and how to mitigate common vulnerabilities

Inferno Drainer is a widely used piece of JavaScript malware in web3 phishing campaigns. Its purpose is to drain the assets of phishing…

🍋 An open dataset containing smart contract audit issues from various sources. - tintinweb/smart-contract-vulndb

A new pattern for DeFi Smart Contract Security

Understand the risks and considerations of staking with Geth, and how it affects Ethereum's security.

OpenZeppelin recently identified a critical vulnerability during an audit of Linea‘s PLONK verifier. At its core, the issue is similar in nature to some previously disclosed vulnerabilities (e.g., Frozen Heart, 00). The ‘Last Challenge’ vulnerability arises…

Introduction  In this blog post, we tell a tale of how we discovered a novel attack against ECDSA and how we applied it to datasets we found in the wild, including the Bitcoin and Ethereum net…

In this article we will outline the security issues encountered in yield aggregators, a very common type of projects in DeFi.

In this article, we will analyze and categorize vulnerabilities discovered during security audits of projects implemented using AA.

Profiles by Cyfrin