博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育What is a Blockchain Audit and How Does It Work?The importance of blockchain audits and how they work. We will also explore the benefits of conducting a blockchain audit and why it should be a top priority for L1 founders and the developers who build applications on top of these base layers.
漏洞研究Critical Infrastructure: Secure Engineering of Blockchain BridgesBlockchain bridges enable users to transfer assets or data from one blockchain to another. Since most blockchains are developed in isolated environments and employ different rules and consensus mechanisms, they cannot communicate natively, and tokens cannot move freely between them.
教育How AI Can Enhance Cybersecurity: A Primer on Deep Learning and its ApplicationsAI-powered tools such as ChatGPT have attracted considerable interest in the software development community. These tools have many applications, including to the security of Web3 platforms and smart contracts.
技术分析Runtime Environment and Smart Contract Security ModelingThe design and runtime of different blockchains alter the security of smart contracts built on top of them. In this blog post, we will explore how security changes based on different runtime models.
技术分析Tokenomics Failures in 2022Tokenomics is a crypto-native term that refers to the creation, management, and interaction of tokens with holders and their respective ecosystems. It is complex and interdisciplinary, combining elements of economics, finance, and many other fields, with significant variations among different token mechanisms based on the unique characteristics of each ecosystem.
教育什么是Soulbound NFT?“Soulbound” NFTs have attracted attention recently, with Ethereum founder Vitalik Buterin being one notable proponent. The concept of a soulbound NFT is derived from the online multiplayer game World of Warcraft. In the game, users are able to obtain high-level weapons and accessories that cannot be traded or exchanged but are instead tied to the user’s account, thus they are “soulbound.” 
技术分析Challenges Encountered In the Formal Verification of ERC-20 ContractsSome tokens implement functionality that goes beyond the ERC-20 standard. These cases are generally more challenging for formal verification. Other contracts have computations that are generally hard to verify. Let's dive into the details of these challenges and discuss how to handle them.
技术分析Auditing with ChatGPT: Complementary But IncompleteZKasino, a decentralized betting platform, recently engaged in a pre-audit with ChatGPT. ZKasino hoped that ChatGPT could give it an initial security review while CertiK’s comprehensive audit was in progress.
技术分析Hacktivism: Part TwoThe introduction of blockchain technology has reinforced hacktivism, which has been prominent in the past four decades, through the popularity of cryptocurrency. These case studies follow details of hacktivism as it pertains to cryptocurrency, social justice, and technology ethics.
技术分析Formally Verifying OpenZeppelin’s ERC-20 ImplementationOpen Zeppelin’s ERC-20 reference implementation is widely used in Web3. A bug in it would be devastating for the many contracts that derive from it. But how do we know that it is correct? And how do we know contracts that derive from it do so correctly and do not introduce bugs?
技术分析ERC-20 Properties For Formal VerificationThis sheet outlines the specifications used in our formal verification models.
技术分析Formal Verification of ERC-20 TokensDon't just trust your code, verify it. In this first of a three-part series, our engineers walk through the formal verification of ERC-20 contracts.