CertiK 블로그
Web3의 기관화가 본격화되는 흐름에 맞춰 보안 연구, 규제 동향 및 데이터 분석을 통해 업계 변화를 실행 가능한 의사결정 인사이트로 전환합니다.
리서치
모든 연구 자료 보기
Quantum Computing Threats to the Blockchain Industry
This report examines how future fault-tolerant quantum computers may compromise blockchain cryptography, and what protocols, validators, custodians, and ecosystem participants must do to migrate before the window closes.
In-Depth Research on the Telegram Escrow Market: Platform Evolution, Ecosystem Structure, and Regulatory Challenges
The Telegram escrow market has gradually evolved into an underground service ecosystem that integrates escrow matching, fund settlement, merchant management, and traffic distribution, showing clear signs of “platformization” and network-based development.
Resolv Protocol Incident Analysis
On 22 March 2026, the Revolv protocol was exploited, resulting in a loss of ~$26.8M due to a compromise of the project's cloud infrastructure which gave access to Resolv’s AWS Key Management Service (KMS).
정책 펄스
모두 보기 정책 펄스
Inside the CertiK x XDC Fireside Chat: Trade Finance, Tokenization, and AI Security
CertiK Co-Founder and CEO, Rongui Gu, and XDC Foundation’s Billy Sebell discuss trade finance, tokenization, AI-driven cybersecurity risks, and the infrastructure needed for institutional blockchain adoption.
CertiK and CoinW Discuss AI, Cybersecurity, and the Future of Secure Crypto Trading
CertiK Co-Founder and CEO, Rongui Gu, and CoinW’s Marketing Director Manfred Chew discuss exchange security, AI-driven cyber threats, transparency, and the future of user trust in Web3.
Slow and Steady Progress Toward U.S. Crypto Legislation
An overview of regulatory developments in the United States in February 2026, including the Senate Banking draft, GENIUS Act implementation, and the SEC “Task Force” transition.
기술적 분석
모두 보기 기술적 분석
Post-Quantum Signatures, Part 2: From Trees to Forests
XMSS builds on one-time signatures by organizing OTS keys into Merkle trees and hyper-trees, delivering a practical post-quantum signature scheme with compact proofs, fast verification, and a critical trade-off: strict state management.
Soroban Contract State Management
This article explores potential security issues related to Soroban contract state storage and highlights key considerations during development, helping Soroban smart contract developers avoid storage-related vulnerabilities.
What Is a Smart Contract?
Smart contracts are blockchain-based programs that automate agreements without intermediaries. Learn how smart contracts work, their uses, benefits, and risks.
회사 소식
모두 보기 회사 소식
CertiK Skill Scanner: The Antivirus for the AI Age
CertiK Skill Scanner establishes a standardized security layer for third-party AI Skills, identifying execution-stage risks before they reach user data, assets, or systems.
CertiK, IDAI Summit 2026에서 AI 도입과 디지털 자산 사이버보안 인사이트 공유
CertiK은 IDAI Summit 2026에서 Web3 생태계의 AI 도입이 가속화됨에 따라 새롭게 부상하는 보안 위협을 분석했습니다. 간접 참조 취약점, 메모리 오염 등 AI 에이전트의 구조적 보안 리스크를 살펴보고, 디지털 자산 보호를 위한 지능형 실시간 감사의 중요성을 강조했습니다.
CertiK Expands AI-Native Security with Agent Integrations and AI Auditor
AI Auditor was originally built as an internal tool for CertiK’s own auditors, but is now available to the public after more than six months of rigorous application. In evaluations against 35 real-world Web3 security incidents from 2026, AI Auditor achieved an 88.6% cumulative exact hit rate, all while being engineered specifically to deliver high detection with exceptionally low noise.