블로그
기술 인사이트
CertiK 엔지니어가 전하는 스마트 계약 취약점 심층 분석, 블록체인 보안 모범 사례 및 기술 연구.
취약점 리서치Vulnerability in Electron-based Application: Unintentionally Giving Malicious Code Room to RunOne of our security engineers discovered a remote code execution vulnerability in the Symbol desktop wallet and reported the vulnerability through their bug bounty program. Though the HackerOne report is not yet public, we give many thanks to the Symbol team for allowing us to disclose and share our findings.
교육 자료NoOps: Reinventing Your Staking UXBy developing blockchain and cybersecurity technologies in parallel and complementary to one another, CertiK envisions NoOps as not just a singular product in its portfolio, but a gateway to innovation, discoveries, and deep knowledge in these two sectors.
교육 자료Introducing NoOps: The New Way to Run Your NodesThe product serves as a one-stop solution that serves the needs of different groups of end users actively participating in the staking business.
기술 분석CORS-anywhere: The Dangers of Misconfigured Third-Party SoftwareIn a recent web application penetration test, we discovered a critical vulnerability that we didn’t expect to find.
기술 분석e-Money’s NGM Staking Token Code ReviewCertiK’s mission of every audit is to apply different approaches and detection methods, ranging from manual, static, and dynamic analysis.
기술 분석OKEx Academy Talks Recap: How to Ensure Security for DeFi InvestorsEarlier last month, CertiK was proud to be a part of OKEx’s Academy Talks. The live online discussion on DeFi and Security was moderated by Boxmining with other representatives from SlowMist and SECBIT
기술 분석KardiaChain's Audit OverviewThis report has been prepared for KardiaChain to discover issues and vulnerabilities in the source code.
기술 분석Streamr Monoplasma Blockchain Audit OverviewThe goal of CertiK’s audit was to review the source code for Streamr’s Monoplasma smart contract with its full Solidity inheritance chain. The outcome represents a certification that the verified smart contracts are robust enough to avoid any potentially unexpected loopholes. 
교육 자료Hiblocks' Smart Contract Audit for Decentralized Social MediaHiblocks, a blockchain-based social media curation platform, worked with CertiK to audit the design and implementation of its soon-to-be-release smart contracts.
교육 자료CertiK’s Smart Contract Audit of SkinChain’s SKCSkinChain a blockchain platform exclusively for the cosmetic industry, aims to build an efficient product production and distribution ecosystem that can analyze integrated data and provide customized solutions.
교육 자료How DeepSEA Works The DeepSEA language syntax is inspired by functional languages like ML and Coq itself. The simple token contract below shows the general appearance, we will use it as a running example.
기술 분석Validator Economic Incentive Model for Ethereum 2.0Phase zero of Ethereum 2.0 is expected to launch during the second or third quarter of 2020. It’s the first transitional stage of Ethereum network from Proof of Work (PoW) to Proof of Stake (PoS), which will pass block validation function from miners to validators.