Blog
Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.
EducationalWhat is Multi-Party Computation (MPC)?Multi-Party Computation (MPC) is a mathematical approach used in cryptography that has the ultimate goal of having a cryptographic operation computed by multiple entities while ensuring that their inputs stay private and are not shared with any third party.
EducationalSocial Media Crypto ScamsMore than $1 billion was lost to crypto scams since the beginning of 2021. Many of these are initiated on social media platforms. Read on to learn more about the most common types of scams and how to avoid falling victim to them.
Technology analysisBehind the Curtain: Inside the Investigation Task Force at CertiKIn films, we often encounter suave detectives using intricate stringboards to crack complex mysteries. Is that how we do it at CertiK? Read on to meet our investigation team.
Vulnerability researchFortifying ZenGo: Unearthing and Defending Against Privileged User Attacks CertiK engineers recently discovered a vulnerability in ZenGo's cryptocurrency wallet application and worked with their team to patch it. Read the details here.
Technology analysisKYC'd Wallet Sales on Dark Net MarketsScammers and criminals use falsely-obtained, fully-KYC'd accounts on centralized exchanges to wash the proceeds of their heists. But how do they get these, and what role do dark web markets play?
Technology analysisA Closer Look at Deep Learning Techniques for Software SecurityThe advantages of deep learning can only be realized when it is properly applied. In order to apply deep learning techniques to software security problems effectively, it is important to consider how deep neural networks represent source code.
Vulnerability researchModal Phishing in Web3 Mobile WalletsWe recently identified a new type of phishing technique that can be used to mislead victims about the identity of connected dApps. We name this novel phishing technique Modal Phishing.
Vulnerability researchHow Safe is SafeMoon? Analyzing the FETA and BEVO ExploitsTL;DR: Regular SafeMoon-cloned projects are not vulnerable to the flashloan attack used against FETA/BEVO implementations.
Technology analysisThe Move Prover: Quality Assurance of Formal VerificationOr any automated prover, for that matter.
EducationalSecure Smart Contract Programming in FunC: Top 10 Tips for TON DevelopersTON is an innovative blockchain that incorporates novel concepts in smart contract design. In this article, we’ll go through a couple of the most interesting features of the TON blockchain, then we’ll go through a list of best practices for developers programming smart contracts in FunC.
EducationalWhat is Web3 Penetration Testing?Web3 has introduced a new era of decentralized applications (dApps) and blockchain-based systems. As the use of these technologies and the value secured by them grow, the need for secure Web3 development and implementation also increases. 
EducationalSmart Contract Security: Protecting Digital AssetsSecurity – in the context of smart contracts – refers to the prevention of unauthorized access, modification, or theft of the assets and agreements that smart contracts hold.