博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育What is Multi-Party Computation (MPC)?Multi-Party Computation (MPC) is a mathematical approach used in cryptography that has the ultimate goal of having a cryptographic operation computed by multiple entities while ensuring that their inputs stay private and are not shared with any third party.
教育Social Media Crypto ScamsMore than $1 billion was lost to crypto scams since the beginning of 2021. Many of these are initiated on social media platforms. Read on to learn more about the most common types of scams and how to avoid falling victim to them.
技术分析Behind the Curtain: Inside the Investigation Task Force at CertiKIn films, we often encounter suave detectives using intricate stringboards to crack complex mysteries. Is that how we do it at CertiK? Read on to meet our investigation team.
漏洞研究Fortifying ZenGo: Unearthing and Defending Against Privileged User Attacks CertiK engineers recently discovered a vulnerability in ZenGo's cryptocurrency wallet application and worked with their team to patch it. Read the details here.
技术分析KYC'd Wallet Sales on Dark Net MarketsScammers and criminals use falsely-obtained, fully-KYC'd accounts on centralized exchanges to wash the proceeds of their heists. But how do they get these, and what role do dark web markets play?
技术分析A Closer Look at Deep Learning Techniques for Software SecurityThe advantages of deep learning can only be realized when it is properly applied. In order to apply deep learning techniques to software security problems effectively, it is important to consider how deep neural networks represent source code.
漏洞研究Modal Phishing in Web3 Mobile WalletsWe recently identified a new type of phishing technique that can be used to mislead victims about the identity of connected dApps. We name this novel phishing technique Modal Phishing.
漏洞研究How Safe is SafeMoon? Analyzing the FETA and BEVO ExploitsTL;DR: Regular SafeMoon-cloned projects are not vulnerable to the flashloan attack used against FETA/BEVO implementations.
技术分析The Move Prover: Quality Assurance of Formal VerificationOr any automated prover, for that matter.
教育Secure Smart Contract Programming in FunC: Top 10 Tips for TON DevelopersTON is an innovative blockchain that incorporates novel concepts in smart contract design. In this article, we’ll go through a couple of the most interesting features of the TON blockchain, then we’ll go through a list of best practices for developers programming smart contracts in FunC.
教育是什么Web3渗透测试？Web3 has introduced a new era of decentralized applications (dApps) and blockchain-based systems. As the use of these technologies and the value secured by them grow, the need for secure Web3 development and implementation also increases. 
教育Smart Contract Security: Protecting Digital AssetsSecurity – in the context of smart contracts – refers to the prevention of unauthorized access, modification, or theft of the assets and agreements that smart contracts hold.