Resources
CertiK Blog
Security research, regulatory insights, and data-backed analyses for the institutional Web3 era. Turning real-world signals into actionable intelligence.
Featured
Featured articles
Technical insightsClear Signing Under the Hood: A Technical Guide to ERC-7730What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
Policy pulseThe OCC's Final GENIUS Act Rules: What Stablecoin Issuers Need to KnowThe Office of the Comptroller of the Currency (OCC) has finalized its rulebook for payment stablecoin issuers under the GENIUS Act. The rules take effect on January 18, 2027, the same day the GENIUS Act itself takes effect. Any issuer that wants to be in the U.S. market on day one has less than three months to get its house in order.
Ecosystem analysisMonad’s Multi-Layer Financial Ecosystem Is Forming Market LeadersAs of October 2026, Monad held about USD 1 billion in TVL as its trading, lending, stablecoin, and RWA activity concentrated around emerging market leaders.
Categories
Browse by category
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.Technical insights
Deep dives into smart contract vulnerabilities, blockchain security best practices, and technical research from CertiK engineers.Company updates
Product releases, announcements, and service updates from CertiK.Ecosystem analysis
Explore CertiK's data-driven analysis of blockchain ecosystems, covering security trends, emerging risks, major incidents, and insights shaping Web3.Policy pulse
Expert commentary on Web3 regulation, policy developments, and the geopolitics of digital assets.All blogs
CertiK provides educational content including blogs and case studies on Web3 security blockchain audits and compliance for developers and users.
Latest
Recently published
A Leading Bank in a G20 Economy Builds an Institutional Security Foundation for Crypto Exchange and Custody Services with CertiKA leading bank in a G20 economy with a large retail and digital customer base expanded into regulated digital-asset services through a crypto exchange and an institutional custody platform. The move extended the bank’s operating model beyond traditional financial applications into services where digital-asset movement is irreversible and a security failure can create direct financial loss, service disruption, and lasting reputational damage.
How a Regulated RWA Platform Strengthened Its Security Posture With CertiKA licensed RWA tokenization and trading platform enables users to subscribe to, redeem, and trade tokenized assets through web and mobile channels. To meet its annual penetration testing requirement under the Monetary Authority of Singapore(MAS), the organization needed an independent assessment of application security and the workflows connecting off-chain services with on-chain execution.
How a Global Payments Provider Assessed a Settlement Token Infrastructure With CertiKA global payments provider developed a token-based settlement platform to support digital-asset settlement in the European market. CertiK conducted an independent, multi-layer security assessment covering the in-scope applications, APIs, private-blockchain environment, and smart contract.
Paxos Builds a Repeatable Security Process for Multi-Chain Stablecoin Development with CertiKPaxos, a regulated blockchain infrastructure and tokenization platform, develops stablecoin products and infrastructure for institutional and enterprise use. Since 2023, CertiK has supported these initiatives through architecture evaluation, development-stage security review, smart contract audits, and penetration testing. 
Research reportsX 100 Incident AnalysisIn the first operation, the initiating wallet received about 4.75 million USDT after the flash loan was repaid, while the voting deposits remained locked. On 24 October 2026, borrowed USDT bought enough X to capture two of X100's three Senate seats. That majority immediately authorized treasury trades through liquidity controlled by the executing contract. Selling the resulting X supplied the loan repayment and payout.
How a Global Bank Reviewed Smart Contracts Against Its Business Rules With CertiKA global bank operating in Hong Kong was developing smart-contract functionality to support digital asset operations within a controlled blockchain environment. The implementation combined token functionality with institution-controlled permissions, transaction restrictions, administrative actions, and upgrade mechanisms. The institution needed an assessment that examined the code in the context of its intended business rules and operating model, rather than applying generic assumptions about publicly accessible token systems.