Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Industry researchNavigating the European Banking Authority’s Compliance Guidelines with SkyInsightsThe European Banking Authority (EBA) has updated its guidelines on money laundering and counter-terrorist financing, extending these to include crypto-asset service providers (CASPs). Compliance and risk management tools like SkyInsights aid CASPs in adapting to these new guidelines through enhanced transaction monitoring and risk identification capabilities.
Industry researchTrap Phishing on Trusted Platforms: A New Phishing Trend in The Web3 WorldWe have identified a new active form of phishing in the Web3 ecosystem. It involves putting phishing traps in influential platforms like exchanges and marketplaces to broaden the reach and credibility of phishing sites. The phishing traps can be in the form of web3 project job advertisements, airdrops, and NFT sales from faked project sites. 
Industry researchHow AI is Transforming KYC for Crypto Project TeamsIn the often-anonymous world of crypto, effective Know Your Customer (KYC) tools are essential to validate the integrity and legitimacy of crypto project teams. Artificial Intelligence (AI) has become a crucial part of this process. It's used by KYC investigators to confirm identities and by teams to understand and manage their own risks.
Industry researchThe Rise of Stablecoins in Unstable TimesIn addition to mitigating the price volatility inherent in the cryptocurrency market, stablecoins serve what is to millions of people an even more important purpose: acting as a financial refuge during periods of economic and political instability.
Industry researchFaint Traces: Unmasking a Million-Dollar ScammerCertiK analysts have been closely monitoring a scammer known as "Faint" since late 2022. This individual has been linked to numerous Discord compromises and phishing activities on both Ethereum and Solana.
Industry researchChasing Shadows: A Decade of Criminal Crypto SeizuresAs cryptocurrency has risen in prominence over the past decade, governments worldwide have increasingly targeted illicit funds and criminal activity in the space. This pursuit has included arresting individuals involved and confiscating vast amounts of digital assets.
Industry researchOn-Chain Ransomware - The Ryuk Group: Part TwoTwo Russian cyber criminal gangs, Conti and Ryuk, dominated the ransomware scene between 2018 and 2022. Despite both groups operating within separate two year windows (Ryuk from 2018 to 2020; Conti from 2020 to 2022), our analysis has identified cryptocurrency wallets belonging to both groups that were active outside of these timelines.
Industry researchOn-Chain Ransomware - The Conti Group: Part OneThe Conti Group is a notorious ransomware gang that has left a trail of chaos in its wake. This report pulls back the curtain on Conti's operations, revealing a complex web of deception, financial gain, and potential connections to other criminal groups. Join us as we delve into the murky world of ransomware and explore the inner workings of one of its most infamous players.
Industry researchA Grey Area: Retroactive Bug Bounty NegotiationsBetween October 2020 and March 2023 there have been 25 exploits of Web3 projects where the impacted projects were later able to recover some or all of the funds lost. How did they recover nearly a billion dollars?
Industry researchKYC Actors are Ramping Up Their GameCertiK intelligence analysts have noticed an evolution in the use of KYC actors by malicious operators.
Industry researchThe Rug Pull ReportExit scams, popularly referred to as rug pulls, are an ongoing criminal scheme in Web3. A rug pull involves fraudsters robbing a crypto project by liquidating their holdings without warning and leaving investors holding worthless tokens.
Industry researchHow Pro-Russian Groups Are Fundraising on Telegram to Evade SanctionsPro-Russian groups are helping each other crowdfund weapons, supplies, and materiel by promoting each others wallets across a large network of Telegram channels. In this analysis, we use on-chain evidence to examine the flow of funds.