博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育Clear Signing Under the Hood: A Technical Guide to ERC-7730What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
教育What Is the CLARITY Act?What the CLARITY Act is, how it would split crypto oversight between the SEC and CFTC, where it stands in Congress, and what it means for crypto businesses.
教育Preparing for a Web3 Penetration Test: What to Expect Before, During, and Afterreparing for a Web3 penetration test? Here’s what happens before, during, and after an engagement, and how to get the most value from yours.
教育Red Team vs. Pentest vs. Bug Bounty: Building a Complete Web3 Security ProgramRed team vs. pentest vs. bug bounty for Web3 projects: what each one actually tests, when to use which, and how to combine them into one program.
技术分析Tolk Security Explained: From FunC’s Engineering Pain Points to New Audit ConsiderationsThis article compares FunC and Tolk through code, explains how typed schemas, automatic serialization, and lazy loading change TON contract security, and identifies the risks developers and auditors still need to review.
教育CIP-56 安全措施的实际应用：面向 Canton 机构的指南How Daml views, choices, factories, client-side construction, and operational permissions determine the security of CIP-56 assets.
教育What Is a Crypto-Asset Service Provider (CASP)?A crypto-asset service provider (CASP) is any business offering any regulated “‘crypto-asset service” as defined under the EU's MiCA framework. Learn what qualifies, what compliance requires, and how to meet it.
教育Post-Quantum Signatures, Part 3: Inside FIPS 205 Through Quranium’s SLH-DSA Adoption In this post, we use the structure of FIPS 205 to explain how SLH-DSA works and why it matters for real protocol implementations. We start with Forest of Random Subsets (FORS), the few-time signature component that signs part of the randomized message digest, then build up the hypertree that authenticates the reconstructed FORS public key to the public root. Finally, we examine how FIPS 205 defines the concrete SLH-DSA algorithm used by interoperable implementations.
教育How to Prepare for a CCSS AuditInstitutional counterparties ask crypto businesses a hard question: how do you safeguard your private keys? A bank wants evidence before it opens an account. A fund wants it before it deposits assets. The CryptoCurrency Security Standard (CCSS) exists to answer that question with an audit instead of a claim. This guide explains what the standard covers, how certification works and how you prepare for it.
教育What Is a Zero-Knowledge Virtual Machine (zkVM)?A zkVM is a computational system designed to verify that a program executed correctly, without revealing the program's internal data. By combining zero-knowledge proofs (ZKPs) with virtual machine (VM) technology, zkVMs enable verifiable computation across blockchain and Web3 ecosystems, boosting transparency, privacy, and scalability all at once.
教育The Summer Regulatory Crunch: All Eyes on the CLARITY ActAn overview of notable crypto regulatory developments that happened in June 2026. 
教育What Are Decentralized Apps (dApps)?Decentralized apps (dApps) run on blockchain networks like Ethereum, Solana, BSC, SUI, and Avalanche. Learn what dApps are, how they work, examples, and their advantages in Web3.