Blog
Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.
Technology analysisEVM – Cosmos Convergence Research From Security Base: Part 2In Part 1 of this blog series, we examined the integration of EVM and Cosmos at the application layer, and the risks associated with merging these stacks. Part 2 introduces a novel method for interacting with Cosmos through EVM transactions. Specifically, it details the workflow of specialized precompiled contracts engineered to overcome functional limitations and establish a connection between the two ecosystems.
EducationalHow Tornado Cash Usage Has Changed Since Sanctions Were Lifted In this blog, we look at how Tornado Cash works, the history of its sanctions, and how its usage has shifted since the sanctions were lifted. 
Vulnerability researchPancakeSwap Infinity: Hooks Security ConsiderationsThis article discusses some of the new features of PancakeSwap Infinity, and explores the security considerations related to PancakeSwap Infinity hooks. 
Vulnerability researchPectra’s EIP-7702: Redefining Trust Assumptions of Externally Owned Accounts (EOAs) in EVMIn this post, we examine how EIP-7702 reshapes core EVM assumptions, spotlight mocked examples, and provide actionable guidance for developers to assess whether their existing contracts may be vulnerable.
Vulnerability researchOracle Wars: The Rise of Price Manipulation AttacksIn this article, we look at how oracles work, why they matter, how they can be exploited, and more, with the goal of educating DeFi participants on how to better protect themselves from these types of threats. 
Technology analysisEVM – Cosmos Convergence Research From Security Base: Part 1Ethereum and Cosmos, two prominent blockchain protocols, have long pursued integration through solutions like EVM compatible chains built on Cosmos SDK (e.g. evmos/Ethermint), followed by the emerging consensus-layer (CL) swaps (e.g. Tendermint replacement for Ethereum PoS) in EVM compatible chains. This series unpacks their technical approaches and associated security trade-offs, providing an in-depth exploration of the convergence of these ecosystems.
Technology analysisMove for Solidity Developers I: Storage and Access Control“Move for Solidity Developers” is a series created for experienced Solidity developers who already know a bit about Move. It helps you shift from writing Solidity contracts to developing on Move-based blockchains, such as Aptos and Sui. In this first installment, we’ll explore how Move’s approach to state storage and access control differs from the Solidity/EVM model. By drawing comparisons and analogies, we aim to make these new concepts feel familiar.
Technology analysisA “Long Overdue” innovation in Cardano: Interoperable Programmable Token DesignAs CIP-113 advances toward finalization, CertiK is closely tracking its progress—a milestone that could reshape how developers build and enterprises engage with Cardano. This article explores the specification in depth, covering its background, the problems it addresses, its implementation, its impact on the Cardano ecosystem, comparisons with ERC-20, and security considerations.
Vulnerability researchUniswap V4: Hooks Security ConsiderationsThis article discusses some of the new features of Uniswap V4, and explores the security considerations related to Uniswap V4 hooks. 
EducationalHow to Protect Your Crypto in 2025Given that phishing attacks are on the rise, it’s important for all Web3 participants to learn how to better protect their cryptocurrency. Below, we’ll look at strategies for avoiding phishing and traps you should avoid. 
EducationalExploring PSBT in Bitcoin DeFi: Security Best PracticesIn this article, we share our extensive research and insights into PSBT, delving into its components, applications in Bitcoin DeFi, and the security risks associated with improper usage. We aim to highlight best practices for secure PSBT implementation and contribute to the ongoing efforts to strengthen Bitcoin ecosystem security.
Technology analysisSecure Smart Contract Programming in Tact: Popular Mistakes in the TON EcosystemThe Open Network (TON) continues to push the boundaries of blockchain technology with its innovative features and robust smart contract capabilities. Building on the insights and lessons learned from previous blockchain platforms like Ethereum, TON offers developers a more efficient and flexible environment. One of the key components driving this advancement is the Tact language.