博客
技术洞察
深入探讨智能合约漏洞、区块链安全最佳实践以及 CertiK 工程师的技术研究。
教育What is Privileged Access Management Risk?Privileged access management risk refers to the risk of compromise surrounding accounts that have access to critical network controls. Having accounts with privileged access provides hackers with a single point of attack that, when compromised, incurs catastrophic damage to the wider network. This blog post takes you through what privileged management risk is, and the best ways of mitigating it.
教育A Security Checklist For New Crypto InvestorsEntering the world of cryptocurrency for the first time can be a daunting experience. With this in mind, we have put together a checklist of some best practices for any new crypto investor looking to step into the exciting world of web3.
教育What is an Online Attack?One of the promises of blockchain technology is its ability to bolster the safety of online activity through the greater security afforded by decentralization. However, despite this added security, it is naive to assume that online attacks will just go away. With that in mind, this post provides an overview of some of the most infamous online attacks, how they intersect with blockchain technology, and some of the ways of defending against such attacks.
教育What is a Soft Rugpull vs a Hard Rugpull?Rugpulls are the bane of any new investor trying to get rich quick. Yet often, all investors need to avoid them is a little more information on what to look out for. With that in mind, this article takes you through the two types of rugpull and gives tips on how to spot them.
教育What is a Reentrancy Attack?This blog post will take you through one of the most infamous exploits in blockchain security: the reentrancy attack, and best practices for defending against them
教育What is a Mintable Token?Trying to get your head around the difference between ‘mintable tokens’ and ‘mineable tokens’ can be a complicated affair, primarily because there is a lot of slippage in the terminology between the two. The difference is that to mint new tokens through mining requires a lot more time, resources and effort.
教育What is dApp Security?The systematic setup of decentralized apps unfortunately leaves them susceptible to hackers in some situations. As more businesses migrate to dApps and other cloud-based structures, it is important to keep safety and security in mind. Even as technology changes, cybercriminals will look for ways to infiltrate it.
教育What is Tornado Cash?One of the defining features of a cryptocurrency is that its ledger, containing all transactions that have ever taken place, is globally visible. However Tornado Cash believes a fundamental principle is that privacy is a human right, and the more everyone adopts privacy measures, the more secure it is for all of us.
教育What is a Crypto Scam？With an influx of new users and the DeFi boom, crypto scams were more prominent than ever. There are a few things that users can do to protect themselves from these crypto scams, but first we need to know what types of crypto scams there are and what to look out for.
教育What is On-Chain Monitoring?DeFi security goes far beyond smart contract audits. On-chain monitoring provides crypto traders with a fascinating tool to delve into the real-time insights of a blockchain network. This gives the opportunity to capitalize on the advantages offered by a more data-abundant and transparent crypto market.
教育What is a Blockchain Replay Attack?Despite being designed to be tamper-proof, democratic, and immutable, blockchain technology is not immune to cyberattacks. In this post, let’s take a look at one of the most prominent cyberattacks that affect blockchain technology today: replay attacks. 
教育What is Blockchain Security?Blockchain security is one of the biggest hurdles to mass adoption and is one of the biggest worries for outsiders not involved in the space. To really understand blockchain security, the risks, and ways to minimize the risk, we must first truly understand what blockchain is.