Resources
CertiK Blog
Security research, regulatory insights, and data-backed analyses for the institutional Web3 era. Turning real-world signals into actionable intelligence.
Featured
Featured articles
Technical insightsClear Signing Under the Hood: A Technical Guide to ERC-7730What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
Policy pulseThe OCC's Final GENIUS Act Rules: What Stablecoin Issuers Need to KnowThe Office of the Comptroller of the Currency (OCC) has finalized its rulebook for payment stablecoin issuers under the GENIUS Act. The rules take effect on January 18, 2027, the same day the GENIUS Act itself takes effect. Any issuer that wants to be in the U.S. market on day one has less than three months to get its house in order.
Ecosystem analysisMonad’s Multi-Layer Financial Ecosystem Is Forming Market LeadersAs of October 2026, Monad held about USD 1 billion in TVL as its trading, lending, stablecoin, and RWA activity concentrated around emerging market leaders.
Categories
Browse by category
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.Company updates
Product releases, announcements, and service updates from CertiK.Ecosystem analysis
Explore CertiK's data-driven analysis of blockchain ecosystems, covering security trends, emerging risks, major incidents, and insights shaping Web3.Policy pulse
Expert commentary on Web3 regulation, policy developments, and the geopolitics of digital assets.All blogs
CertiK provides educational content including blogs and case studies on Web3 security blockchain audits and compliance for developers and users.
Latest
Recently published
How a Global Payments Provider Assessed a Settlement Token Infrastructure With CertiKA global payments provider developed a token-based settlement platform to support digital-asset settlement in the European market. CertiK conducted an independent, multi-layer security assessment covering the in-scope applications, APIs, private-blockchain environment, and smart contract.
Paxos Builds a Repeatable Security Process for Multi-Chain Stablecoin Development with CertiKPaxos, a regulated blockchain infrastructure and tokenization platform, develops stablecoin products and infrastructure for institutional and enterprise use. Since 2023, CertiK has supported these initiatives through architecture evaluation, development-stage security review, smart contract audits, and penetration testing. 
Research reportsX 100 Incident AnalysisIn the first operation, the initiating wallet received about 4.75 million USDT after the flash loan was repaid, while the voting deposits remained locked. On 24 October 2026, borrowed USDT bought enough X to capture two of X100's three Senate seats. That majority immediately authorized treasury trades through liquidity controlled by the executing contract. Selling the resulting X supplied the loan repayment and payout.
How a Global Bank Reviewed Smart Contracts Against Its Business Rules With CertiKA global bank operating in Hong Kong was developing smart-contract functionality to support digital asset operations within a controlled blockchain environment. The implementation combined token functionality with institution-controlled permissions, transaction restrictions, administrative actions, and upgrade mechanisms. The institution needed an assessment that examined the code in the context of its intended business rules and operating model, rather than applying generic assumptions about publicly accessible token systems.
Research reportsPaperTrade BBO Pricing IncidentPaperTrade reported manipulation attempts on 10–11 October 2026 targeting the Hyperliquid best bid and ask (BBO) used to price its synthetic positions. The project acknowledged the attempts on 11 October. The account examined in this analysis withdrew 1,279,106.191184 USDC more than it deposited. PaperTrade settled positions at the instantaneous BBO midpoint, while its profit haircut used a fixed reference notional. This linked large synthetic payouts to an influenceable quote without increasing the haircut percentage as position size grew.
Technical insightsWhat Is the CLARITY Act?What the CLARITY Act is, how it would split crypto oversight between the SEC and CFTC, where it stands in Congress, and what it means for crypto businesses.