Protect Your Project Today
Strengthen your project with the largest web3 security provider.
A CertiK security expert will review your request and follow up shortly.

Ecosystem

AI Smart Contracts: The Future of Adaptive, Intelligent Blockchain Automation

AI Smart Contracts: The Future of Adaptive, Intelligent Blockchain Automation

AI smart contracts combine blockchain and AI to enable adaptive automation, real-time decision-making, and scalable Web3 applications.

CertiK Expands AI-Native Security with Agent Integrations and AI Auditor

CertiK Expands AI-Native Security with Agent Integrations and AI Auditor

AI Auditor was originally built as an internal tool for CertiK’s own auditors, but is now available to the public after more than six months of rigorous application. In evaluations against 35 real-world Web3 security incidents from 2026, AI Auditor achieved an 88.6% cumulative exact hit rate, all while being engineered specifically to deliver high detection with exceptionally low noise.

March 2026 Regulatory Recap: A New Era of Cooperation

March 2026 Regulatory Recap: A New Era of Cooperation

An overview of the transformative U.S. crypto regulatory developments in March 2026, featuring the SEC-CFTC peace treaty, the Token Taxonomy release, and a breakthrough in the Senate Banking "yield" debate.

Web3 Penetration Testing: A Practical Guide

Web3 Penetration Testing: A Practical Guide

How Web3 penetration testing secures smart contracts, wallets, and infrastructure through real-world attack simulation, standardized methodologies, and actionable remediation.

Gate Wallet Integrates CertiK Skynet Scores Into Its Earn Platform

Gate Wallet Integrates CertiK Skynet Scores Into Its Earn Platform

Gate's Web3 Wallet now displays CertiK Skynet Scores directly within its Earn product pages, giving users on-chain security intelligence at the point of investment decision-making.

OpenClaw Security Report

OpenClaw Security Report

The rapid adoption of OpenClaw, a popular open-source autonomous AI agent framework, reflects a broader shift toward AI-driven assistants. However, the widespread integration of this framework introduces critical security risks that may lead to unauthorized actions, data exposure, and system compromise.

Resolv Protocol Incident Analysis

Resolv Protocol Incident Analysis

On 22 March 2026, the Revolv protocol was exploited, resulting in a loss of ~$26.8M due to a compromise of the project's cloud infrastructure which gave access to Resolv’s AWS Key Management Service (KMS).

Security Readiness Accelerates Regulatory Approval for VASPs

Security Readiness Accelerates Regulatory Approval for VASPs

Security infrastructure is becoming a common bottleneck in VASP licensing. This guide covers what regulators evaluate, the documentation gaps that trigger follow-up cycles, and a practical sequencing framework to get ahead of them.

Movie Token Incident Analysis

Movie Token Incident Analysis

On 10 March 2026, the Movie Token (MT) contract was exploited for approximately $242,000 due to a critical flaw in its 'sell' logic. The vulnerability stemmed from a double-counting error: when a user sold MT tokens, the contract simultaneously transferred them to the liquidity pair for the swap and added that same balance to a pendingBurnAmount variable. When distributeDailyRewards() subsequently burned those pending tokens, it created an artificial supply shock, inflating the MT price and allowing the attacker to drain value from the pool.

Skill Scanning Is Not a Security Boundary

Skill Scanning Is Not a Security Boundary

OpenClaw is an open-source, self-hosted personal AI agent platform designed to run on a user’s local machine or server. It supports long-term memory, autonomous operation, integration with mainstream LLMs, and remote control through messaging platforms like Telegram.

Skynet Crypto ATM Fraud Report

Skynet Crypto ATM Fraud Report

Crypto ATM fraud is one of the fastest-growing financial crime categories in the United States. Criminal organizations exploit the speed and pseudonymity of crypto kiosks to extract funds from vulnerable populations at an accelerating pace. In the Skynet Crypto ATM Fraud Report, we discuss types of crypto ATM attacks, global statistics, attacker profiles, key enforcement actions, detection and mitigation strategies, and recommendations to protect against these types of fraud.

Hiding in Plain Sight: zERC20 and zk-Proof-of-Burn

Hiding in Plain Sight: zERC20 and zk-Proof-of-Burn

For years, the industry has struggled with this exact question. In this article, we are going to dive deep into an emerging privacy solution: zERC20. zERC20 is a pragmatic, immediate implementation of a concept known as plausible deniability (originally proposed in EIP-7503), which means the cryptographic evidence of an action equally supports a completely innocent explanation. For zERC20, depositing funds into the privacy protocol is mathematically indistinguishable from a user accidentally sending tokens to a dead address.

Showing 1-12 of 742 items