블로그
기술 인사이트
CertiK 엔지니어가 전하는 스마트 계약 취약점 심층 분석, 블록체인 보안 모범 사례 및 기술 연구.
교육 자료Advancing Sui: The Evolution of Sui’s Payment PipelineExplore how Sui's Address Balance layer powers gasless stablecoin transfers, providing a frictionless user experience while tackling complex engineering challenges at the execution and settlement level.
교육 자료Security Considerations for Passkey-Based Web3 WalletsThis article analyzes that security model across the full asset-control lifecycle. It traces a single transaction through Clave's open-source implementation, surveys past vulnerabilities in WebAuthn, FIDO2, and CTAP, maps them onto the lifecycle of a typical Passkey Wallet, and ends with implementation checks for teams building one.
교육 자료Post-Quantum Signatures, Part 2: From Trees to ForestsXMSS builds on one-time signatures by organizing OTS keys into Merkle trees and hyper-trees, delivering a practical post-quantum signature scheme with compact proofs, fast verification, and a critical trade-off: strict state management.
교육 자료Soroban Contract State ManagementThis article explores potential security issues related to Soroban contract state storage and highlights key considerations during development, helping Soroban smart contract developers avoid storage-related vulnerabilities.
교육 자료What Is a Smart Contract? Smart contracts are blockchain-based programs that automate agreements without intermediaries. Learn how smart contracts work, their uses, benefits, and risks.
교육 자료The Rise of the Agent Economy, Part 2: Security Deep Dive into EIP-8004, EIP-8183, Hooks, and EvaluatorsStandards like EIP-8004 and EIP-8183 are strong foundations, but as we build more complex layers, such as scoring systems, hooks, and AI evaluators, new risks are introduced.
취약점 리서치2026 Wrench Attacks OverviewAfter the publication of our February 2026 Wrench Attacks Report, we now look at the continued escalation of wrench attacks, which have become a structural threat for cryptocurrency holders. 
교육 자료The Rise of the Agent Economy, Part 1: How EIP-8004, EIP-8183, and x402 Turn AI Agents into Sovereign Economic ActorsBy integrating three critical technical pillars—Identity (EIP-8004), Commerce (EIP-8183), and Payments (x402)—we can build an open machine economy where AI agents operate as sovereign economic actors, secured by trustless primitives rather than centralized gatekeepers.
교육 자료The Role of AI in Smart Contract Auditing: Opportunities and ChallengesExplore how AI is reshaping smart contract auditing in Web3, from faster vulnerability detection to new risks like false positives and model limitations. 
교육 자료AI Smart Contracts: The Future of Adaptive, Intelligent Blockchain AutomationAI smart contracts combine blockchain and AI to enable adaptive automation, real-time decision-making, and scalable Web3 applications.
교육 자료March 2026 Regulatory Recap: A New Era of CooperationAn overview of the transformative U.S. crypto regulatory developments in March 2026, featuring the SEC-CFTC peace treaty, the Token Taxonomy release, and a breakthrough in the Senate Banking "yield" debate.
교육 자료Web3 Penetration Testing: A Practical GuideProtect your Web3 stack—smart contracts, wallets, APIs, and cloud—with penetration testing. Discover CertiK’s methodology to eliminate vulnerabilities first.