Blog
Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.
Technology analysisCrypto Wallet Security Assessment ChecklistThe 16th of December is a day that will go down in crypto history, and for all the right reasons. Bitcoin, the king of cryptocurrency and the brainchild of Satoshi Nakamoto, skyrocketed above the $20,000 price mark, and between then and now there’s been no sign of this slowing down.
EducationalBoosted Finance Secures DeFi Smart Contracts With CertiKNEW YORK, 10/12/2020 - We’re happy to announce that the $BOOST governance token, including its functionality with a plethora of native smart contracts such as Boost treasury, Boost token rewards, Controller, and Vault has been successfully audited with CertiK. No issues identified by Certik were considered a threat to the safety of the smart contract deployment. A summary of the audit scope and findings as documented by the CertiK Professional Services Division follows up.
Technology analysisAuditing Substrate Based Systems in RustAs a systems programming language, Rust is fast and memory-efficient, thread-safe and memory-safe, with predictable performance, expansive documentation, an amazing tool stack and an extremely welcoming community.
EducationalCertiK Audits PlotX Protocol To Ensure Integrity Of Token Smart ContractsCertiK is proud to announce another successful audit of the PlotX Smart Contracts by CertiK Professional Services.
Technology analysisDeepSEA Version 1.0 with eWasm & Ants ReleaseCertiK is proud to announce version 1.0 of the DeepSEA compiler. You can download the executable and examples from the [github releases page](https://github.com/CertiKProject/deepsea-preview/releases). There are two major improvements in this release. First, the compiler is now complete enough to support practical smart contracts. Second, in addition to Ethereum 1.0 and the CertiK Chain, we have added experimental support for compiling to Ethereum 2.0 style WebAssembly.
EducationalAllianceBlock and CertiK's Audit ProcedureThe CertiK team was contracted by the AllianceBlock team to audit the design and implementation of their smart contracts, and its compliance with the EIPs it’s meant to execute on.
EducationalCertiK and Lien Finance’s Second Audit Engagement and Pen TestRecently, the CertiK team and Lien Finance team closed another audit engagement on the iDOL, Lien Token, and Oracle modules, and a penetration test on the wallet.
Technology analysisCertiK Audits TellorCore V2, a DeFi Decentralized OracleCertiK is proud to announce another successful audit for Tellor, a decentralized oracle for DeFi that bridges the gap between off-chain data and on-chain needs. 
EducationalLien Protocol’s Smart Contract Audits: Provided By CertiKLien is a simple and elegant protocol that allows anyone to create a unique derivative contract.
Technology analysisCertiK Works with Most Protocol to Audit MostERC20Most Protocol brings algorithmic-stable tokens into the crypto world in a fully trustless manner.
Technology analysisIs Your Blockchain Explorer Safe from Denial-of-Service (DoS) Attacks?In this article, we’ll discuss some of the mistakes that developers made that led to a DoS attack, the impact of a DoS attack, and recommendations on how to protect the application.
Vulnerability researchCVE-2020-5902 Analysis, F5 BIG-IP RCE VulnerabilityThe cybersecurity sphere was in a buzz about the new entry in the Common Vulnerabilities and Exposures database: CVE-2020-5902, a remote code execution vulnerability in F5 BIG-IP devices. Read on to learn what our security researcher discovered.