Blog
Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.
EducationalClear Signing Under the Hood: A Technical Guide to ERC-7730What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
EducationalWhat Is the CLARITY Act?What the CLARITY Act is, how it would split crypto oversight between the SEC and CFTC, where it stands in Congress, and what it means for crypto businesses.
EducationalPreparing for a Web3 Penetration Test: What to Expect Before, During, and Afterreparing for a Web3 penetration test? Here’s what happens before, during, and after an engagement, and how to get the most value from yours.
EducationalRed Team vs. Pentest vs. Bug Bounty: Building a Complete Web3 Security ProgramRed team vs. pentest vs. bug bounty for Web3 projects: what each one actually tests, when to use which, and how to combine them into one program.
EducationalWhere CIP-56 Security Actually Lives: A Guide for Institutions on CantonHow Daml views, choices, factories, client-side construction, and operational permissions determine the security of CIP-56 assets.
EducationalWhat Is a Crypto-Asset Service Provider (CASP)?A crypto-asset service provider (CASP) is any business offering any regulated “‘crypto-asset service” as defined under the EU's MiCA framework. Learn what qualifies, what compliance requires, and how to meet it.
EducationalPost-Quantum Signatures, Part 3: Inside FIPS 205 Through Quranium’s SLH-DSA Adoption In this post, we use the structure of FIPS 205 to explain how SLH-DSA works and why it matters for real protocol implementations. We start with Forest of Random Subsets (FORS), the few-time signature component that signs part of the randomized message digest, then build up the hypertree that authenticates the reconstructed FORS public key to the public root. Finally, we examine how FIPS 205 defines the concrete SLH-DSA algorithm used by interoperable implementations.
EducationalHow to Prepare for a CCSS AuditInstitutional counterparties ask crypto businesses a hard question: how do you safeguard your private keys? A bank wants evidence before it opens an account. A fund wants it before it deposits assets. The CryptoCurrency Security Standard (CCSS) exists to answer that question with an audit instead of a claim. This guide explains what the standard covers, how certification works and how you prepare for it.
EducationalWhat Is a Zero-Knowledge Virtual Machine (zkVM)?A zkVM is a computational system designed to verify that a program executed correctly, without revealing the program's internal data. By combining zero-knowledge proofs (ZKPs) with virtual machine (VM) technology, zkVMs enable verifiable computation across blockchain and Web3 ecosystems, boosting transparency, privacy, and scalability all at once.
EducationalThe Summer Regulatory Crunch: All Eyes on the CLARITY ActAn overview of notable crypto regulatory developments that happened in June 2026. 
EducationalWhat Are Decentralized Apps (dApps)?Decentralized apps (dApps) run on blockchain networks like Ethereum, Solana, BSC, SUI, and Avalanche. Learn what dApps are, how they work, examples, and their advantages in Web3.
EducationalAdvancing Sui: The Evolution of Sui’s Payment PipelineExplore how Sui's Address Balance layer powers gasless stablecoin transfers, providing a frictionless user experience while tackling complex engineering challenges at the execution and settlement level.