博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
漏洞研究BGP Hijacking: How Hackers Circumvent Internet Routing Security to Tear the Digital Fabric of TrustThe Border Gateway Protocol acts as the Internet's postal service, directing how information should traverse between different networks. It has been exploited by hackers to attack multiple Web3 platforms.
教育Crypto Social Media Scams: How to Stay SafeWhile scams are nothing new, the intersection of social media and cryptocurrency has formed a potent breeding ground for a new generation of fraud.
教育The Proliferation of Honeypot Contracts in Web3The rise of Web3 has ushered in a wave of innovation, not all of which is benevolent. A notable manifestation of malicious activity within this space is the emergence of "honeypot contracts." These contracts issue tokens that can be bought but not sold, thereby trapping investors.
教育Scaling with Layer 2s: Rollups vs SidechainsLayer 2 protocols aim to enhance blockchain scalability while preserving decentralization. How do two main types – rollups and sidechains – compare on security?
漏洞研究How Hackers Use DNS Hijacking Attacks to Steal Funds and Clone WebsitesHackers are using a technique known as DNS hijacking to steal Web3 users' seed phrases with sophisticated phishing attacks.
技术分析Auditing With Finite State Machines: A Complementary MethodologyDuring a recent bridge audit, an approach utilizing Finite State Machines led to the identification of a critical vulnerability. FSMs serve as valuable tools for discovering bugs in the implementation of a project design.
教育Beyond the Bot: Unpacking Telegram Bot TokensTelegram Bot Tokens (TBTs) are an emerging sector in the Web3 industry that enable users to execute various DeFi activities through a Telegram interface while incorporating tokens.
教育Blockchain Fundamentals: Key Consensus AlgorithmsConsensus algorithms are the bedrock upon which distributed systems, including blockchains, are built. These algorithms are protocols that every node in a blockchain network adheres to in order to achieve agreement on a shared state.
技术分析How to Formally Verify A Cosmos SDK Standard ModuleFormal Verification of the Whole Web3 Stack: Part Three
技术分析Formal Verification of TON Master Chain ContractsThe Open Network (TON) is a Layer 1 blockchain that launched its mainnet in 2022. When TON prepared for their blockchain launch, they commissioned an audit from CertiK for all layers of the blockchain code: the node implementation, consensus engine, and smart contracts.
技术分析Exploring the Efficiency of MPC Algorithms in Crypto WalletsThis piece delves deeper into the specific algorithms utilized in MPC wallets and their impact on a wallet's key operation: transaction signing.
技术分析Multi-Party Computation (MPC) in Wallets: A Review of Current StrategiesThe term Multi-Party Computation (MPC) has been growing steadily in prominence within the Web3 sphere, and it's playing an integral role in new wallet technologies that are paving the way for widespread Web3 adoption.