博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
漏洞研究Vulnerability in Electron-based Application: Unintentionally Giving Malicious Code Room to RunOne of our security engineers discovered a remote code execution vulnerability in the Symbol desktop wallet and reported the vulnerability through their bug bounty program. Though the HackerOne report is not yet public, we give many thanks to the Symbol team for allowing us to disclose and share our findings.
教育NoOps: Reinventing Your Staking UXBy developing blockchain and cybersecurity technologies in parallel and complementary to one another, CertiK envisions NoOps as not just a singular product in its portfolio, but a gateway to innovation, discoveries, and deep knowledge in these two sectors.
教育Introducing NoOps: The New Way to Run Your NodesThe product serves as a one-stop solution that serves the needs of different groups of end users actively participating in the staking business.
技术分析CORS-anywhere: The Dangers of Misconfigured Third-Party SoftwareIn a recent web application penetration test, we discovered a critical vulnerability that we didn’t expect to find.
技术分析e-Money’s NGM Staking Token Code ReviewCertiK’s mission of every audit is to apply different approaches and detection methods, ranging from manual, static, and dynamic analysis.
技术分析OKEx Academy Talks Recap: How to Ensure Security for DeFi InvestorsEarlier last month, CertiK was proud to be a part of OKEx’s Academy Talks. The live online discussion on DeFi and Security was moderated by Boxmining with other representatives from SlowMist and SECBIT
技术分析KardiaChain's Audit OverviewThis report has been prepared for KardiaChain to discover issues and vulnerabilities in the source code.
技术分析Streamr Monoplasma Blockchain Audit OverviewThe goal of CertiK’s audit was to review the source code for Streamr’s Monoplasma smart contract with its full Solidity inheritance chain. The outcome represents a certification that the verified smart contracts are robust enough to avoid any potentially unexpected loopholes. 
教育Hiblocks' Smart Contract Audit for Decentralized Social MediaHiblocks, a blockchain-based social media curation platform, worked with CertiK to audit the design and implementation of its soon-to-be-release smart contracts.
教育CertiK’s Smart Contract Audit of SkinChain’s SKCSkinChain a blockchain platform exclusively for the cosmetic industry, aims to build an efficient product production and distribution ecosystem that can analyze integrated data and provide customized solutions.
教育How DeepSEA Works The DeepSEA language syntax is inspired by functional languages like ML and Coq itself. The simple token contract below shows the general appearance, we will use it as a running example.
技术分析Validator Economic Incentive Model for Ethereum 2.0Phase zero of Ethereum 2.0 is expected to launch during the second or third quarter of 2020. It’s the first transitional stage of Ethereum network from Proof of Work (PoW) to Proof of Stake (PoS), which will pass block validation function from miners to validators.