博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育What is a Reentrancy Attack?This blog post will take you through one of the most infamous exploits in blockchain security: the reentrancy attack, and best practices for defending against them
教育What is a Mintable Token?Trying to get your head around the difference between ‘mintable tokens’ and ‘mineable tokens’ can be a complicated affair, primarily because there is a lot of slippage in the terminology between the two. The difference is that to mint new tokens through mining requires a lot more time, resources and effort.
教育What is dApp Security?The systematic setup of decentralized apps unfortunately leaves them susceptible to hackers in some situations. As more businesses migrate to dApps and other cloud-based structures, it is important to keep safety and security in mind. Even as technology changes, cybercriminals will look for ways to infiltrate it.
教育What is Tornado Cash?One of the defining features of a cryptocurrency is that its ledger, containing all transactions that have ever taken place, is globally visible. However Tornado Cash believes a fundamental principle is that privacy is a human right, and the more everyone adopts privacy measures, the more secure it is for all of us.
教育What is a Crypto Scam？With an influx of new users and the DeFi boom, crypto scams were more prominent than ever. There are a few things that users can do to protect themselves from these crypto scams, but first we need to know what types of crypto scams there are and what to look out for.
教育What is On-Chain Monitoring?DeFi security goes far beyond smart contract audits. On-chain monitoring provides crypto traders with a fascinating tool to delve into the real-time insights of a blockchain network. This gives the opportunity to capitalize on the advantages offered by a more data-abundant and transparent crypto market.
教育What is a Blockchain Replay Attack?Despite being designed to be tamper-proof, democratic, and immutable, blockchain technology is not immune to cyberattacks. In this post, let’s take a look at one of the most prominent cyberattacks that affect blockchain technology today: replay attacks. 
教育What is Blockchain Security?Blockchain security is one of the biggest hurdles to mass adoption and is one of the biggest worries for outsiders not involved in the space. To really understand blockchain security, the risks, and ways to minimize the risk, we must first truly understand what blockchain is. 
教育What is Blockchain Analysis?Blockchain analysis is the process of inspecting, cataloging, and interpreting the data that blockchains produce in order to gain actionable insights. It can also help you take control of your own personal security, by displaying exactly how much traceable information every transaction creates. As more and more value shifts onto public blockchains, it’s worth remembering that all activity is out in the open, viewable by anyone and everyone.
教育What is Centralization Risk?Centralization risk at its core is a single point of failure within a DeFi protocol. Smart contracts with centralized ownership are riskier than contracts with a timelock or multi-signature key ownership. In smart contract audits, this is the most common major issue pointed out by the CertiK security experts
教育What Is DeFi SecurityThe total TVL (Total Value Locked) in DeFi protocols reached over $75B in 2021. With these kinds of numbers, the importance of DeFi security is clear. There are numerous measures in place to help combat these hacks and exploits
教育What is a Flash Loan?Flash Loans are a new invention in the DeFi space that was first introduced to the blockchain space by Ethereum based lending protocol AAVE in January of 2020. A flash loan is an uncollateralized extremely short-term loan. The loans are borrowed and repaid in the same transaction run by a smart contract. AAVE among others understands the importance of smart contract audits as it pertains to their DeFi protocols. However, smart contract audits are not a perfect solution as there can be vulnerabilities not in the code but in the design of a protocol. Let’s take a look at how flash loans exposed one such type of vulnerability, but first, we need to better understand flash loans.