MOVE Demistyfied part 3 — vulnerabilities in storage and access control checksIn this article we’re highlighting some of the vulnerabilities which might be found in Move smart contracts and which are result of…Jun 10, 20241Jun 10, 20241
MOVE demystified part 2 — structs, storage and (cap)abilitiesIn the previous part, we discussed how to deploy your first module. In this part, we’ll take a closer look at how data is kept and managed…May 24, 2024May 24, 2024
Aptos MOVE demystified part 1 — HelloWorld moduleIn the beginning we wanted to create some article about Move security and vulnerabilities, but in the middle we felt that it won’t be…May 20, 2024May 20, 2024
Published inCoinmonksAnother look at the security of ERC4626 VaultsThere are some interesting aspects of ERC4626 security which might be helpful to know during security assessments.Mar 4, 20243Mar 4, 20243
Published inCoinmonksA guide to reentrancy: abusing the external calls for fun and profitThe reentrancy vulnerability is one of most serious ones that can be found in solidity smart contracts. Apart from the “classic” reentrancy…Mar 26, 2023Mar 26, 2023
Published inCoinmonksEthereum signatures for hackers and auditors 101In real world you can sign documents using your personal signature, which is assumed to be unique and proves that you support, acknowledge…Feb 9, 2023Feb 9, 2023
Published inCoinmonksCommon proxy vulnerabilities in Solidity — part 2Second part of article which highlights typical security issues in solidity upgradeable smart contracts / proxies.Jan 27, 2023Jan 27, 2023
Automated auditing part 2 — usage of AI for Smart Contracts testingRecent increased popularity of various AI-based solutions can be a great help to Smart contracts auditing. Read the article to learn how.Jan 27, 2023Jan 27, 2023
Published inCoinmonksCommon proxy vulnerabilities in Solidity part 1Proxies are used to implement upgradeability in Solidity smart contracts. There are some typical security issues that can be found in them.Jan 27, 2023Jan 27, 2023
Automated auditing part 1 — fuzzing with EchidnaEchidna is a tool used to fuzz solidity-based smart contract. In this article, we describe basic setup and usage of this tool.Jan 27, 2023Jan 27, 2023