리소스
CertiK 블로그
기관 중심 Web3 시대를 위한 보안 연구, 규제 인사이트, 데이터 기반 분석. 현실 세계의 신호를 실행 가능한 인텔리전스로 전환합니다.
추천
추천 아티클
기술 인사이트Clear Signing Under the Hood: A Technical Guide to ERC-7730What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
정책 동향The OCC's Final GENIUS Act Rules: What Stablecoin Issuers Need to KnowThe Office of the Comptroller of the Currency (OCC) has finalized its rulebook for payment stablecoin issuers under the GENIUS Act. The rules take effect on January 18, 2027, the same day the GENIUS Act itself takes effect. Any issuer that wants to be in the U.S. market on day one has less than three months to get its house in order.
생태계 분석Monad’s Multi-Layer Financial Ecosystem Is Forming Market LeadersAs of October 2026, Monad held about USD 1 billion in TVL as its trading, lending, stablecoin, and RWA activity concentrated around emerging market leaders.
카테고리
카테고리별 보기
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.기술 인사이트
CertiK 엔지니어가 전하는 스마트 계약 취약점 심층 분석, 블록체인 보안 모범 사례 및 기술 연구.회사 소식
CertiK의 제품 출시, 공지 및 서비스 업데이트 소식.생태계 분석
블록체인 생태계의 보안 동향, 새로운 위험, 주요 사고와 Web3를 형성하는 인사이트를 다루는 CertiK의 데이터 기반 분석을 살펴보세요.정책 동향
Web3 규제, 정책 동향 및 디지털 자산 지정학에 대한 전문가 논평.전체 블로그
CertiK는 개발자와 사용자를 위해 Web3 보안, 블록체인 감사 및 규정 준수에 관한 블로그와 고객 사례 등 교육 콘텐츠를 제공합니다.
최신
최근 게시물
How a Global Payments Provider Assessed a Settlement Token Infrastructure With CertiKA global payments provider developed a token-based settlement platform to support digital-asset settlement in the European market. CertiK conducted an independent, multi-layer security assessment covering the in-scope applications, APIs, private-blockchain environment, and smart contract.
Paxos Builds a Repeatable Security Process for Multi-Chain Stablecoin Development with CertiKPaxos, a regulated blockchain infrastructure and tokenization platform, develops stablecoin products and infrastructure for institutional and enterprise use. Since 2023, CertiK has supported these initiatives through architecture evaluation, development-stage security review, smart contract audits, and penetration testing.
리서치 보고서X 100 Incident AnalysisIn the first operation, the initiating wallet received about 4.75 million USDT after the flash loan was repaid, while the voting deposits remained locked. On 24 October 2026, borrowed USDT bought enough X to capture two of X100's three Senate seats. That majority immediately authorized treasury trades through liquidity controlled by the executing contract. Selling the resulting X supplied the loan repayment and payout.
How a Global Bank Reviewed Smart Contracts Against Its Business Rules With CertiKA global bank operating in Hong Kong was developing smart-contract functionality to support digital asset operations within a controlled blockchain environment. The implementation combined token functionality with institution-controlled permissions, transaction restrictions, administrative actions, and upgrade mechanisms. The institution needed an assessment that examined the code in the context of its intended business rules and operating model, rather than applying generic assumptions about publicly accessible token systems.
리서치 보고서PaperTrade BBO Pricing IncidentPaperTrade reported manipulation attempts on 10–11 October 2026 targeting the Hyperliquid best bid and ask (BBO) used to price its synthetic positions. The project acknowledged the attempts on 11 October. The account examined in this analysis withdrew 1,279,106.191184 USDC more than it deposited. PaperTrade settled positions at the instantaneous BBO midpoint, while its profit haircut used a fixed reference notional. This linked large synthetic payouts to an influenceable quote without increasing the haircut percentage as position size grew.
기술 인사이트What Is the CLARITY Act?What the CLARITY Act is, how it would split crypto oversight between the SEC and CFTC, where it stands in Congress, and what it means for crypto businesses.