博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育Security Considerations for Passkey-Based Web3 WalletsThis article analyzes that security model across the full asset-control lifecycle. It traces a single transaction through Clave's open-source implementation, surveys past vulnerabilities in WebAuthn, FIDO2, and CTAP, maps them onto the lifecycle of a typical Passkey Wallet, and ends with implementation checks for teams building one.
教育Post-Quantum Signatures, Part 2: From Trees to ForestsXMSS builds on one-time signatures by organizing OTS keys into Merkle trees and hyper-trees, delivering a practical post-quantum signature scheme with compact proofs, fast verification, and a critical trade-off: strict state management.
教育Soroban Contract State ManagementThis article explores potential security issues related to Soroban contract state storage and highlights key considerations during development, helping Soroban smart contract developers avoid storage-related vulnerabilities.
教育What Is a Smart Contract? Smart contracts are blockchain-based programs that automate agreements without intermediaries. Learn how smart contracts work, their uses, benefits, and risks.
教育The Rise of the Agent Economy, Part 2: Security Deep Dive into EIP-8004, EIP-8183, Hooks, and EvaluatorsStandards like EIP-8004 and EIP-8183 are strong foundations, but as we build more complex layers, such as scoring systems, hooks, and AI evaluators, new risks are introduced.
教育The Rise of the Agent Economy, Part 1: How EIP-8004, EIP-8183, and x402 Turn AI Agents into Sovereign Economic ActorsBy integrating three critical technical pillars—Identity (EIP-8004), Commerce (EIP-8183), and Payments (x402)—we can build an open machine economy where AI agents operate as sovereign economic actors, secured by trustless primitives rather than centralized gatekeepers.
教育The Role of AI in Smart Contract Auditing: Opportunities and ChallengesExplore how AI is reshaping smart contract auditing in Web3, from faster vulnerability detection to new risks like false positives and model limitations. 
教育AI Smart Contracts: The Future of Adaptive, Intelligent Blockchain AutomationAI smart contracts combine blockchain and AI to enable adaptive automation, real-time decision-making, and scalable Web3 applications.
教育March 2026 Regulatory Recap: A New Era of CooperationAn overview of the transformative U.S. crypto regulatory developments in March 2026, featuring the SEC-CFTC peace treaty, the Token Taxonomy release, and a breakthrough in the Senate Banking "yield" debate.
教育Web3 Penetration Testing: A Practical GuideProtect your Web3 stack—smart contracts, wallets, APIs, and cloud—with penetration testing. Discover CertiK’s methodology to eliminate vulnerabilities first.
教育OpenClaw Security ReportThe rapid adoption of OpenClaw, a popular open-source autonomous AI agent framework, reflects a broader shift toward AI-driven assistants. However, the widespread integration of this framework introduces critical security risks that may lead to unauthorized actions, data exposure, and system compromise.
教育Security Readiness Accelerates Regulatory Approval for VASPsSecurity infrastructure is becoming a common bottleneck in VASP licensing. This guide covers what regulators evaluate, the documentation gaps that trigger follow-up cycles, and a practical sequencing framework to get ahead of them.