Skip to content

Blog

Use this space to tell everyone about what you have to offer.

Research

All
Security Insights
Development Insights
Security Audits
    Filters Filters
    Sort Sort
    Square view
    List view
    The Notorious Bug Digest #4: Deflationary Token Risks, ERC4626 Override Gaps, and Rust Shift Overflows
    The Notorious Bug Digest #4: Deflationary Token Risks, ERC4626 Override Gaps, and Rust Shift Overflows
    Inside ZKStack's Crosschain Architecture — Part I: A Deep Dive into Merkle Tree Hierarchies
    Inside ZKStack's Crosschain Architecture — Part I: A Deep Dive into Merkle Tree Hierarchies
    Testing Arbitrum Stylus Smart Contracts with Motsu
    Testing Arbitrum Stylus Smart Contracts with Motsu
    6 Questions To Ask Before Writing a Uniswap v4 Hook
    6 Questions To Ask Before Writing a Uniswap v4 Hook
    The Notorious Bug Digest #3
    The Notorious Bug Digest #3
    A Developer’s Guide to Building Safe Noir Circuits
    A Developer’s Guide to Building Safe Noir Circuits
    The Notorious Bug Digest #2
    The Notorious Bug Digest #2
    The Notorious Bug Digest #1
    The Notorious Bug Digest #1
    Poseidon go brr with Stylus: Cryptographic functions are 18x more gas-efficient via Rust on Arbitrum
    Poseidon go brr with Stylus: Cryptographic functions are 18x more gas-efficient via Rust on Arbitrum
    ZK-SNARKS & The Last Challenge Attack: Mind Your Fiat-Shamir!
    ZK-SNARKS & The Last Challenge Attack: Mind Your Fiat-Shamir!
    Arbitrary Address Spoofing Attack: ERC2771Context Multicall Public Disclosure
    Arbitrary Address Spoofing Attack: ERC2771Context Multicall Public Disclosure
    OpenZeppelin Security Analysis: UniswapX
    OpenZeppelin Security Analysis: UniswapX
    OpenZeppelin Security Report: Top Security Incidents and Insights from April - June 2023
    OpenZeppelin Security Report: Top Security Incidents and Insights from April - June 2023
    Security Report: Top Incidents and Insights from April - June 2023
    Security Report: Top Incidents and Insights from April - June 2023
    Auditing Like A Pro With Nikesh Nazareth
    Auditing Like A Pro With Nikesh Nazareth
    Auditing Like A Pro With Nikesh Nazareth
    Auditing Like A Pro With Nikesh Nazareth
    Incident Response in Web3: Balancing Speed, Values, and Security
    Incident Response in Web3: Balancing Speed, Values, and Security
    Cryptography 101: Building Blocks for Blockchain Security
    Cryptography 101: Building Blocks for Blockchain Security
    Cryptography 101: Building Blocks for Blockchain Security
    Cryptography 101: Building Blocks for Blockchain Security
    Incident Response in Web3: Balancing Speed, Values, and Security
    Incident Response in Web3: Balancing Speed, Values, and Security
    ChatGPT vs Ethernaut
    ChatGPT vs Ethernaut
    ChatGPT vs Ethernaut
    ChatGPT vs Ethernaut
    Account Abstraction's Impact on Security and User Experience
    Account Abstraction's Impact on Security and User Experience
    Account Abstraction's Impact on Security and User Experience
    Account Abstraction's Impact on Security and User Experience
    Defining Industry Standards for Custom Error Messages
    Defining Industry Standards for Custom Error Messages
    Defining Industry Standards for Custom Error Messages
    Defining Industry Standards for Custom Error Messages
    $15B Rugpull Vuln. in Convex Finance protocol Uncovered and Resolved
    $15B Rugpull Vuln. in Convex Finance protocol Uncovered and Resolved
    ANZ Bank's $30 million stablecoin transaction secured by OpenZeppelin
    ANZ Bank's $30 million stablecoin transaction secured by OpenZeppelin
    Introducing OpenZeppelin Subgraphs
    Introducing OpenZeppelin Subgraphs
    Admin Accounts and Multisigs
    Admin Accounts and Multisigs
    GST2 Bytecode Deep Dive
    GST2 Bytecode Deep Dive
    GST2 Bytecode Deep Dive
    GST2 Bytecode Deep Dive
    Fundamentals of Gas Tokens
    Fundamentals of Gas Tokens
    An Introduction to Decentralized DevSecOps
    An Introduction to Decentralized DevSecOps
    An Introduction to Decentralized DevSecOps
    An Introduction to Decentralized DevSecOps
    The State of Smart Contract Upgrades
    The State of Smart Contract Upgrades
    The State of Smart Contract Upgrades
    The State of Smart Contract Upgrades
    Flash-Mintable Asset-Backed Tokens
    Flash-Mintable Asset-Backed Tokens
    Argent Audit Technical Report
    Argent Audit Technical Report
    DeFi Reflections on Hackers and Viruses
    DeFi Reflections on Hackers and Viruses
    What is DeFi? An Introduction to Decentralized Finance
    What is DeFi? An Introduction to Decentralized Finance
    Backdooring Gnosis Safe Multisig wallets
    Backdooring Gnosis Safe Multisig wallets
    Flash Loans and the Advent of Episodic Finance
    Flash Loans and the Advent of Episodic Finance
    Aave Protocol Audit Summary
    Aave Protocol Audit Summary
    A Year of Research at OpenZeppelin
    A Year of Research at OpenZeppelin
    Review Summary of Bounties Network
    Review Summary of Bounties Network
    Changing the feedback experience using positive psychology
    Changing the feedback experience using positive psychology
    Reentrancy After Istanbul
    Reentrancy After Istanbul
    GSN: The Ultimate Ethereum Onboarding Solution
    GSN: The Ultimate Ethereum Onboarding Solution
    Getting the most out of CREATE2
    Getting the most out of CREATE2
    Sign it like you mean it: creating and verifying Ethereum signatures
    Sign it like you mean it: creating and verifying Ethereum signatures
    Technical Description of Critical Vulnerability in MakerDAO Governance
    Technical Description of Critical Vulnerability in MakerDAO Governance
    MakerDAO Critical Vulnerability Notice
    MakerDAO Critical Vulnerability Notice
    A new wave of applications
    A new wave of applications
    Building Blocks
    Building Blocks
    Building Blocks
    Building Blocks
    Follow this quality checklist before an audit
    Follow this quality checklist before an audit
    Testing real-world contract upgrades
    Testing real-world contract upgrades
    EVM package deployment with ZeppelinOS—Part II
    EVM package deployment with ZeppelinOS—Part II
    EVM package deployment with ZeppelinOS—Part II
    EVM package deployment with ZeppelinOS—Part II
    State of EVM Packages – End of 2018
    State of EVM Packages – End of 2018
    State of EVM Packages – End of 2018
    State of EVM Packages – End of 2018
    Toward a secure code ecosystem
    Toward a secure code ecosystem
    Toward a secure code ecosystem
    Toward a secure code ecosystem
    Deconstructing a Solidity Contract — Part VI: The Metadata Hash
    Deconstructing a Solidity Contract — Part VI: The Metadata Hash
    Deconstructing a Solidity Contract — Part VI: The Metadata Hash
    Deconstructing a Solidity Contract — Part VI: The Metadata Hash
    Deconstructing a Solidity Contract  - Part VI: The Metadata Hash
    Deconstructing a Solidity Contract  - Part VI: The Metadata Hash
    Compliant Decentralization?: Exploring an Approach to Utility Token Distribution
    Compliant Decentralization?: Exploring an Approach to Utility Token Distribution
    Deconstructing a Solidity Contract - Part III: The Function Selector
    Deconstructing a Solidity Contract - Part III: The Function Selector
    Deconstructing a Solidity Contract — Part III: The Function Selector
    Deconstructing a Solidity Contract — Part III: The Function Selector
    Deconstructing a Solidity Contract —Part I: Introduction
    Deconstructing a Solidity Contract —Part I: Introduction
    Deconstructing a Solidity Contract - Part II: Creation vs. Runtime
    Deconstructing a Solidity Contract - Part II: Creation vs. Runtime
    Deconstructing a Solidity Smart Contract - Part 1: Introduction
    Deconstructing a Solidity Smart Contract - Part 1: Introduction
    Deconstructing a Solidity Contract — Part II: Creation vs. Runtime
    Deconstructing a Solidity Contract — Part II: Creation vs. Runtime
    Ethereum in Depth, Part 2
    Ethereum in Depth, Part 2
    Ethereum in Depth, Part 1
    Ethereum in Depth, Part 1
    Ethereum in Depth, Part 1
    Ethereum in Depth, Part 1
    On crowdsales and multiple inheritance
    On crowdsales and multiple inheritance
    On crowdsales and multiple inheritance
    On crowdsales and multiple inheritance
    Smart Contract Upgradeability using Eternal Storage
    Smart Contract Upgradeability using Eternal Storage
    How We Can Improve the Structure of Founder’s Tokens
    How We Can Improve the Structure of Founder’s Tokens
    How We Can Improve the Structure of Founder’s Tokens
    How We Can Improve the Structure of Founder’s Tokens
    Designing the architecture for your Ethereum application
    Designing the architecture for your Ethereum application
    Designing the architecture for your Ethereum application
    Designing the architecture for your Ethereum application
    A Gentle Introduction to Ethereum Programming, Part 2
    A Gentle Introduction to Ethereum Programming, Part 2
    A Gentle Introduction to Ethereum Programming, Part 1
    A Gentle Introduction to Ethereum Programming, Part 1
    Evolution of Smart Contract Security in the Ethereum Ecosystem
    Evolution of Smart Contract Security in the Ethereum Ecosystem
    Evolution of Smart Contract Security in the Ethereum Ecosystem
    Evolution of Smart Contract Security in the Ethereum Ecosystem
    Thin Protocols
    Thin Protocols
    Thin Protocols
    Thin Protocols
    The Parity Wallet Hack Explained
    The Parity Wallet Hack Explained
    The 4 Stages of a Token Sale
    The 4 Stages of a Token Sale
    The 4 Stages of a Token Sale
    The 4 Stages of a Token Sale
    Handling Crowdsale Funds Securely
    Handling Crowdsale Funds Securely
    Handling Crowdsale Funds Securely
    Handling Crowdsale Funds Securely
    Handling Crowdsale Funds Securely
    Handling Crowdsale Funds Securely
    HackerGold Bug Analysis
    HackerGold Bug Analysis
    On Tokens and Crowdsales: 4 Challenges and How to Tackle Them
    On Tokens and Crowdsales: 4 Challenges and How to Tackle Them
    Open Zeppelin and Ethereum
    Open Zeppelin and Ethereum
    Open Zeppelin and Ethereum
    Open Zeppelin and Ethereum
    15 lines of code that could have prevented TheDAO Hack
    15 lines of code that could have prevented TheDAO Hack
    The Ugly Truth About Blockchain Applications
    The Ugly Truth About Blockchain Applications
    The Ugly Truth About Blockchain Applications
    The Ugly Truth About Blockchain Applications
    The Hitchhiker’s Guide to Smart Contracts in Ethereum
    The Hitchhiker’s Guide to Smart Contracts in Ethereum
    The Hitchhiker’s Guide to Smart Contracts in Ethereum
    The Hitchhiker’s Guide to Smart Contracts in Ethereum
    Smart Contracts You Already Signed
    Smart Contracts You Already Signed
    Smart Contracts You Already Signed
    Smart Contracts You Already Signed
    v2 Strengthening DeFi: OpenZeppelin and Compound's Security Partnership in 2024 (Clone)
    v2 Strengthening DeFi: OpenZeppelin and Compound's Security Partnership in 2024 (Clone)
    View more View more