Blog
Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.
Vulnerability researchBGP Hijacking: How Hackers Circumvent Internet Routing Security to Tear the Digital Fabric of TrustThe Border Gateway Protocol acts as the Internet's postal service, directing how information should traverse between different networks. It has been exploited by hackers to attack multiple Web3 platforms.
EducationalCrypto Social Media Scams: How to Stay SafeWhile scams are nothing new, the intersection of social media and cryptocurrency has formed a potent breeding ground for a new generation of fraud.
EducationalThe Proliferation of Honeypot Contracts in Web3The rise of Web3 has ushered in a wave of innovation, not all of which is benevolent. A notable manifestation of malicious activity within this space is the emergence of "honeypot contracts." These contracts issue tokens that can be bought but not sold, thereby trapping investors.
EducationalScaling with Layer 2s: Rollups vs SidechainsLayer 2 protocols aim to enhance blockchain scalability while preserving decentralization. How do two main types – rollups and sidechains – compare on security?
Vulnerability researchHow Hackers Use DNS Hijacking Attacks to Steal Funds and Clone WebsitesHackers are using a technique known as DNS hijacking to steal Web3 users' seed phrases with sophisticated phishing attacks.
Technology analysisAuditing With Finite State Machines: A Complementary MethodologyDuring a recent bridge audit, an approach utilizing Finite State Machines led to the identification of a critical vulnerability. FSMs serve as valuable tools for discovering bugs in the implementation of a project design.
EducationalBeyond the Bot: Unpacking Telegram Bot TokensTelegram Bot Tokens (TBTs) are an emerging sector in the Web3 industry that enable users to execute various DeFi activities through a Telegram interface while incorporating tokens.
EducationalBlockchain Fundamentals: Key Consensus AlgorithmsConsensus algorithms are the bedrock upon which distributed systems, including blockchains, are built. These algorithms are protocols that every node in a blockchain network adheres to in order to achieve agreement on a shared state.
Technology analysisHow to Formally Verify A Cosmos SDK Standard ModuleFormal Verification of the Whole Web3 Stack: Part Three
Technology analysisFormal Verification of TON Master Chain ContractsThe Open Network (TON) is a Layer 1 blockchain that launched its mainnet in 2022. When TON prepared for their blockchain launch, they commissioned an audit from CertiK for all layers of the blockchain code: the node implementation, consensus engine, and smart contracts.
Technology analysisExploring the Efficiency of MPC Algorithms in Crypto WalletsThis piece delves deeper into the specific algorithms utilized in MPC wallets and their impact on a wallet's key operation: transaction signing.
Technology analysisMulti-Party Computation (MPC) in Wallets: A Review of Current StrategiesThe term Multi-Party Computation (MPC) has been growing steadily in prominence within the Web3 sphere, and it's playing an integral role in new wallet technologies that are paving the way for widespread Web3 adoption.