Blog
Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.
Vulnerability researchVulnerability in Electron-based Application: Unintentionally Giving Malicious Code Room to RunOne of our security engineers discovered a remote code execution vulnerability in the Symbol desktop wallet and reported the vulnerability through their bug bounty program. Though the HackerOne report is not yet public, we give many thanks to the Symbol team for allowing us to disclose and share our findings.
EducationalNoOps: Reinventing Your Staking UXBy developing blockchain and cybersecurity technologies in parallel and complementary to one another, CertiK envisions NoOps as not just a singular product in its portfolio, but a gateway to innovation, discoveries, and deep knowledge in these two sectors.
EducationalIntroducing NoOps: The New Way to Run Your NodesThe product serves as a one-stop solution that serves the needs of different groups of end users actively participating in the staking business.
Technology analysisCORS-anywhere: The Dangers of Misconfigured Third-Party SoftwareIn a recent web application penetration test, we discovered a critical vulnerability that we didn’t expect to find.
Technology analysise-Money’s NGM Staking Token Code ReviewCertiK’s mission of every audit is to apply different approaches and detection methods, ranging from manual, static, and dynamic analysis.
Technology analysisOKEx Academy Talks Recap: How to Ensure Security for DeFi InvestorsEarlier last month, CertiK was proud to be a part of OKEx’s Academy Talks. The live online discussion on DeFi and Security was moderated by Boxmining with other representatives from SlowMist and SECBIT
Technology analysisKardiaChain's Audit OverviewThis report has been prepared for KardiaChain to discover issues and vulnerabilities in the source code.
Technology analysisStreamr Monoplasma Blockchain Audit OverviewThe goal of CertiK’s audit was to review the source code for Streamr’s Monoplasma smart contract with its full Solidity inheritance chain. The outcome represents a certification that the verified smart contracts are robust enough to avoid any potentially unexpected loopholes. 
EducationalHiblocks' Smart Contract Audit for Decentralized Social MediaHiblocks, a blockchain-based social media curation platform, worked with CertiK to audit the design and implementation of its soon-to-be-release smart contracts.
EducationalCertiK’s Smart Contract Audit of SkinChain’s SKCSkinChain a blockchain platform exclusively for the cosmetic industry, aims to build an efficient product production and distribution ecosystem that can analyze integrated data and provide customized solutions.
EducationalHow DeepSEA Works The DeepSEA language syntax is inspired by functional languages like ML and Coq itself. The simple token contract below shows the general appearance, we will use it as a running example.
Technology analysisValidator Economic Incentive Model for Ethereum 2.0Phase zero of Ethereum 2.0 is expected to launch during the second or third quarter of 2020. It’s the first transitional stage of Ethereum network from Proof of Work (PoW) to Proof of Stake (PoS), which will pass block validation function from miners to validators.