Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Industry researchWhat is Pseudonymity and Anonymity?The debate between the importance of maintaining pseudonymity and anonymity or implementing regulation is still very much ongoing, and whilst it can be heated at times, it is a necessary conversation if cryptocurrencies are to reach widespread adoption.
March Stats GraphicThe March Stats Graphic shows data from hacks, scams, and incidents in March 2022
February Stats GraphicThe February Stats Graphic shows data from hacks, scams, and incidents in February 2022
What to Learn From Recent Cross-Chain Bridge AttacksThe growth of new blockchains has created additional complexity and risk in the crypto ecosystem. Cross-chain bridges are new attack vectors with inherent security limits that users and project teams should be aware of. In 2022 alone, three major attacks have already occurred on cross-chain bridges. Some key lessons learned from these attacks:
January Stats GraphicThe January Stats Graphic shows data from hacks, scams, and incidents in January 2022
Industry researchThe Environmental Impact of BlockchainBlockchain is here to stay, but that doesn’t mean it can’t be improved. There’s unlikely to be room for multiple chains consuming as much energy as Bitcoin – the original blockchain – but one of the best attributes of everyone working in crypto is their ability to innovate. 
Industry researchShadowy Super Coders or Law-Abiding Citizens: How Anonymous is Blockchain Really?In the face of the passage of the unamended bill and the attention crypto has drawn as a result, it’s a good time to dispel some myths about the anonymity of Bitcoin and other cryptocurrencies.
Incident analysisExploiting a Smart Contract without Security Vulnerabilities: Analysis of True Seigniorage Dollar Attack EventOn March 14th, the CertiK Security Team discovered a novel type of attack which was leveraged against the DeFi stablecoin project; True Seigniorage Dollar. The attack resulted in a total loss of approximated $16,600. In order to conduct this, the attacker took advantage of the principle of the Decentralized Autonomous Organization (DAO) mechanism in order to conduct an attack without manipulating conventional ‘vulnerabilities’.
Incident analysisPAID Network Post MortemThe following post mortem will outline the objective details of the incident
Industry researchPopular Substrate Projects Building In 2020 And Their Frameworkslet’s review some of the most popular substrate projects and their frameworks that are building in 2020.
Incident analysisNexus Mutual Attack: 8 Million LostAt 09:40 am UTC, Dec 14, 2020, CertiK Skynet found a large transaction from Hugh Karp, the founder of Nexus Mutual, which transferred a total of 370,000 NXM tokens to an unknown account. The total value of tokens is approximately 8.33 million US dollars.
Industry researchSummer Defi SpotlightInnovating at a speed that makes weeks feel like months (remember Sushiswap? That was like 5 weeks ago) doesn’t have to be scary - here’s a list of DeFi projects we think are going to change the world.