TL;DR: Fuzzing finds bugs by throwing thousands of random inputs at your code until something breaks. It's how I've caught vulnerabilities...
Continue Reading
TL;DR: Web3 bug bounties have paid out over $200M to security researchers, with individual bounties reaching $13M. But most protocols don't...
Continue Reading
TL;DR: After 200+ audits and 27 years in security, here's the exact checklist I use before signing off on a smart...
Continue Reading
TL;DR: After 27 years of code review across every major programming language and hundreds of smart contract audits, the patterns are...
Continue Reading
TL;DR: DeFi has lost over $3 billion to exploits in the past three years. Most hacks follow predictable patterns: reentrancy, oracle...
Continue Reading
TL;DR: WazirX, India's largest crypto exchange, lost $235M in a wallet compromise. Not exploited through the exchange system itself — the...
Continue Reading
Germany sold 50,000 Bitcoin at an average price of $65K. That's $3.25 billion in liquidation. The timing? Absolutely terrible. And that's...
Continue Reading
TL;DR: Kraken called out CertiK for publishing a security report without permission and using it for marketing. This highlights a real...
Continue Reading
TL;DR: DeFi replaces banks with smart contracts. You deposit collateral, you get credit. No credit check. No approval process. Code decides...
Continue Reading
TL;DR: Blockchain security fundamentals: understand the threat model first, then learn the tools. Most training teaches tools without context. Here's what...
Continue ReadingAt 23:00 CET on 05.03.25, the 1inch team discovered a vulnerability in resolver smart contracts using the obsolete Fusion v1 implementation. No end-user funds were at risk—only resolvers using Fusion v1 in their own contracts.
Polygon PoS still 👑 with continuous innovation from the amazing team led by Sandeep Sreenath @ssandeep
Espectacular acogida en mi charla de hoy en @rootedcon @criptored #seguridad #blockchain
It is nice to see the great spanish white hacking community getting more interested in #Crypto as a career path
A couple of months ago, @asymmetric_re reached out to us with a potential critical vulnerability in the PoS bridge.
We started working on fixing the bug and verifying the vulnerability impact in parallel.
We had the fix rolled out even before our teams could figure out a viable
