How to implement best practices in multisig security to prevent your protocol from getting rekt.

We take a deep dive into Aptos’ implementation of fungible assets, exploring the intricacies hidden within its functions, objects, and interactions. While the Fungible Asset model was designed to address the limitations and security flaws of the legacy Coin…

Welcome to the Web3 Security Auditor's 2024 Rewind, a collection of succinct technical breakdowns of notable security incidents and vulnerabilities from the past year.

The following content has been kindly guest contributed by bogo, as part of the Security Researcher Content Contributor Programme.

ERC4626 property tests for fuzzing and symbolic execution to help vault builders detect standard violations

Learn about front-end exploits in DeFi, including common attack vectors, and the strategies for securing decentralized applications.

Once i’ve started doing audits, it was a bit overwhelming for me to simply read the code, without any hesitation. I’ve believed there is some magic pill, system, framework, that would make from me LSR in one month. Unfortunately there is no magic pill, and…

Web3 security and education for the public benefit.

Many DeFi Protocols have decentralised using DAOs and token governance. This article explores the common vulnerabilities in the...

Zellic is proud to announce Masamune, a curated index of audit reports, bug fixes, and technical documentation of numerous protocols

Key takeaways Introduction Crypto drainers are malicious tools that steal digital assets like NFTs, and tokens from cryptocurrency wallets. They often use phishing techniques and leverage smart contracts to enhance their impact. Typically, users are tricked…

Discover how borrowing and redemption fees help safeguard decentralized stablecoins and prevent exploit scenarios.

A powerful method for a malicious hardware wallet to leak its secret keys.

A field guide on smart contract security best practices, for developers, auditors, and hackers. Smart contract security guidelines, security best practices, and educational resources in one place.

Learn about Solana program security and how to mitigate common vulnerabilities

Inferno Drainer is a widely used piece of JavaScript malware in web3 phishing campaigns. Its purpose is to drain the assets of phishing…

🍋 An open dataset containing smart contract audit issues from various sources. - tintinweb/smart-contract-vulndb

A new pattern for DeFi Smart Contract Security