On-chain order books look great on paper. You get full transparency, composability with the rest of DeFi, and a clean story for users and regulators: “everything is on-chain.”

But once you start implementing them, things get messy fast. Edge cases around…

An attacker exploited a rounding issue in the calculation of the stable swap invariant, deflating the implied BPT price and extracting value via internal balances and a...

A curated collection of Foundry-based tests reproducing real-world EVM attacks.

How to implement best practices in multisig security to prevent your protocol from getting rekt.

We take a deep dive into Aptos’ implementation of fungible assets, exploring the intricacies hidden within its functions, objects, and interactions. While the Fungible Asset model was designed to address the limitations and security flaws of the legacy Coin…

Welcome to the Web3 Security Auditor's 2024 Rewind, a collection of succinct technical breakdowns of notable security incidents and vulnerabilities from the past year.

The following content has been kindly guest contributed by bogo, as part of the Security Researcher Content Contributor Programme.

ERC4626 property tests for fuzzing and symbolic execution to help vault builders detect standard violations

Phishing, DNS hijacks, and front-end exploits drain user funds and TVL. Get a proven defi threat detection platform to stop threats and protect dapps.

The Red Guild (TRG) advances security, education, and open-source tools in the crypto ecosystem. Challenges, resources, and audits for the community.

Many DeFi Protocols have decentralised using DAOs and token governance. This article explores the common vulnerabilities in the...

Zellic is proud to announce Masamune, a curated index of audit reports, bug fixes, and technical documentation of numerous protocols

Key takeaways Introduction Crypto drainers are malicious tools that steal digital assets like NFTs, and tokens from cryptocurrency wallets. They often use phishing techniques and leverage smart contracts to enhance their impact. Typically, users are tricked…

Discover how borrowing and redemption fees help safeguard decentralized stablecoins and prevent exploit scenarios.

A powerful method for a malicious hardware wallet to leak its secret keys.

A field guide on smart contract security best practices, for developers, auditors, and hackers. Smart contract security guidelines, security best practices, and educational resources in one place.

Learn about Solana program security and how to mitigate common vulnerabilities

Inferno Drainer is a widely used piece of JavaScript malware in web3 phishing campaigns. Its purpose is to drain the assets of phishing…