博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育Exploring PSBT in Bitcoin DeFi: Security Best PracticesIn this article, we share our extensive research and insights into PSBT, delving into its components, applications in Bitcoin DeFi, and the security risks associated with improper usage. We aim to highlight best practices for secure PSBT implementation and contribute to the ongoing efforts to strengthen Bitcoin ecosystem security.
教育Unmasking Crypto Market Manipulation: Wash Trading, Spoofing, and MoreMuch like traditional financial markets, crypto markets are not immune to manipulation. Many of the same practices that plague stocks and commodities — like wash trading, spreading fear, and pump and dump schemes — also exist in the crypto space. In this blog, we’ll explore some of the most common manipulation tactics in the crypto markets and discuss how these practices impact the industry as a whole. 
教育How AI is Enhancing Web3: Innovations at the Crossroads of Decentralization Artificial intelligence (AI) and Web3 are two of the most transformative technologies shaping the future of digital interactions. The intersection of these technologies offers intriguing possibilities for enhancing privacy, security, and operational efficiency. 
教育Clarity: Best Practices and ChecklistsClarity is a smart contract language developed collaboratively by Hiro PBC, Algorand, and other stakeholders. It is currently utilized on the Stacks chain (Bitcoin sidechain). The primary goal of Clarity is to provide a high level of predictability and security, ensuring that smart contracts behave as intended without any unexpected side effects.In this article, we explore the concept behind Clarity smart contracts, as well as best practices and security checklists for programming with Clarity. 
教育sCrypt: Nine Smart Contract Development Best PracticessCrypt is an embedded Domain Specific Language (eDSL) based on TypeScript. It’s designed for writing smart contracts on Bitcoin. In this article, we explore the concept behind sCrypt smart contracts, as well as some best practices and security checklists for programming with sCrypt.
教育Bridging the Gap: How We Simplify Crypto SecurityAs digital assets go mainstream, it's more crucial than ever to make sure blockchain projects are secure. Just as important as this is finding ways to communicate security to users. For over five years, we’ve been building a suite of tools designed to both improve projects’ security as well as raise the level of education and understanding of security in the broader community. 
教育Staying Up to Date on Real-World Asset TokenizationReal-world assets (RWAs) is the latest narrative in crypto. It refers to onchain representations of tangible and intangible assets from the traditional financial realm. In this piece, we'll help you stay up to date with all that's going on with RWAs.
教育Soft Spots in Hard Tech: Mobile Security Challenges in Web3Our recent investigation into the integration of blockchain technology with mobile devices has brought to light significant security concerns. These go beyond software risks to include potentially serious hardware vulnerabilities.
教育Crypto Social Media Scams: How to Stay SafeWhile scams are nothing new, the intersection of social media and cryptocurrency has formed a potent breeding ground for a new generation of fraud.
教育The Proliferation of Honeypot Contracts in Web3The rise of Web3 has ushered in a wave of innovation, not all of which is benevolent. A notable manifestation of malicious activity within this space is the emergence of "honeypot contracts." These contracts issue tokens that can be bought but not sold, thereby trapping investors.
教育Scaling with Layer 2s: Rollups vs SidechainsLayer 2 protocols aim to enhance blockchain scalability while preserving decentralization. How do two main types – rollups and sidechains – compare on security?
教育Beyond the Bot: Unpacking Telegram Bot TokensTelegram Bot Tokens (TBTs) are an emerging sector in the Web3 industry that enable users to execute various DeFi activities through a Telegram interface while incorporating tokens.