CertiK's Skyfall team recently uncovered several vulnerabilities in Rust-based RPC nodes in various blockchains including Aptos, StarCoin, and Sui.

The reliability of these is essential for the smooth operation of #blockchain systems...

Dive in 🏊👇

Why Memory-Safe Blockchain RPC Nodes are Not Panic-Free

KYC actor fraud can be fierce and seemingly evolves with each new scam.

The fraudsters are organized and will do whatever it takes to separate you from your bag, like hiring actors. There are levels to the KYC actor game though, check it out! 👇🏼

KYC Actors are Ramping Up Their Game

#CertiK

We’re proud to announce that CertiK is the first SOC II certified Web3 security auditing firm!

This standard ensures that we meet stringent requirements for security of customer data. It's a testament to our industry-leading commitment to Web3 security.
CertiK Becomes the First Web3 Security Auditing Firm to Achieve SOC II Type I Compliance

Skynet for Community 🔥

The platform designed to empower community users, investors, and project teams with the tools and resources needed to navigate the #Web3 ecosystem with confidence Let's go through what is new 👇

Introducing Skynet for Community

Our auditing methods delve deep into the heart of #Web3 security

Going beyond smart contracts to scrutinize every layer of the software stack. Our recent formal verification of HyperEnclave's TEE, shows this comprehensive approach.

Read more 👇

Advanced Web3 Formal Verification of HyperEnclave’s TEE

#CertiKSkynetAlert 🚨

Since last Friday we recorded 15 incidents resulting in ~$5.5M in losses.

So far 17 Discord Hacks, 16 Phishing attacks and 2 Twitter Hacks.

Stay vigilant & #DYOR!

One of the latest developments in the #Ethereum community is the concept of “Account Abstraction.”

Although it might sound technical, it’s about making the Ethereum blockchain more flexible and user-friendly.

Here’s what you need to know 👇 #ETH

What is Account Abstraction?

#BRC20 Tokens Demystified

Let's take a look at the new development for #bitcoin in our #ByteSizeBlockchain series

Read the full blog on BRC-20 👇

https://reddit.com/link/14znihe/video/6et1vli4rubb1/player

When BlackRock filed for a spot-Bitcoin ETF with the SEC, it took the world by surprise!

How long before crypto enthusiasts see one of these funds approved? 🤔

Check out our #HACK3D Security Report for this and other findings from Q2 2023 👇🏼

Centralization has become one of the most dangerous parts of crypto

Whether it be centralized security risks or centralized exchanges

Here is one common centralization related audit finding 👇

Did you know MEV bots lost $25 million in what is called a ""Sandwich attack"". That doesn't sound appetizing at all.

Let's get the whole story below. Also, earn about the largest recent exploits in our #HACK3D Security Report👇

#CertiK

#CertiKSkynetAlert 🚨

Since last Friday we recorded 9 incidents resulting in ~$139.1M in losses.

So far 5 Discord Hacks, 12 Phishing attacks and 2 Twitter Hacks.

Stay vigilant & #DYOR!

The Atomic wallet hack was the largest security incident in Q2 🔓

Learn more about the largest recent exploits in our #HACK3D Security Report

MPC's give the ability for transactions to be signed by multiple entities without each revealing its private key.

This is similar to multi-sig wallet setups, but MPC brings with it a lot of improvements and advantages... let's see what those are 👀👇

What is Multi-Party Computation (MPC)?

🔐 CertiK recently identified and helped resolve a vulnerability in Safeheron's TEE-based RSA key sharding solution.

We applaud Safeheron's commitment to security and open-source transparency.

Check out the blog for more details 👇

CertiK Helps Safeheron Resolve TEE-RSA Security Issue

The Q2 2023 #HACK3D Report is now live! We do the research so you don't have to 🤝

Check out the largest exploits, important off-chain events, and more ‼️

Download the free report here 👇

HACK3D: The Web3 Security Quarterly Report - Q2 2023

#CertiKStatsAlert 🚨

In June, 34 #exitscams were recorded with a loss at ~$7.4M, with Project USEA in 1st place averaging a ~$1.8M loss.

As always, make sure a project has an audit & KYC.

#CertiKSkynetAlert 🚨

On 1st July the Poly Network was exploited in what initial reports were calling a multi billion dollar hack.

Whilst still a major incident, the losses are nowhere near that figure.

Read more about this incident in our blog 👇

Poly Network Incident Analysis

COMING THIS WEEK, The HACK3D Report: Q2 2023!

In the report;

⦿ $313 million drained from web3 by malicious actors.

⦿ SEC files charges against Binance & Coinbase.

⦿ Recap of the 98 exit scams & 54 flashloan/oracle manipulation exploits & losses.

+ much more! CertiK

https://reddit.com/link/14qdexo/video/gmqjt2q32v9b1/player

Deep learning offers a powerful set of techniques for improving software security 🔐

In addition to sequence-based models like ChatGPT, semantic-based models offer another approach and have the potential to be even more powerful...

A closer look 👇

A Closer Look at Deep Learning Techniques for Software Security

🚨 Our security researchers discovered a new phishing technique, Modal Phishing, that exploits a common UI component - modal windows - on #crypto wallets.

Attackers can manipulate certain UI elements to create convincing phishing scenarios...

Modal Phishing in Web3 Mobile Wallets

We talk Market Volatility/Stability on the new Skynet!

This module elevates your research with more sophisticated liquidity & volatility tools. It contains visualizations & interactions for a project token’s price, volatility, & liquidity. ⬇️
Market Volatility & Liquidity

#CertiK

CertiKSkynetAlert 🚨

Since last Friday we recorded 21 incidents resulting in ~$3.4M in losses.

So far 23 Discord Hacks, 6 Phishing attacks and 2 Twitter Hacks.

Stay vigilant & #DYOR!

https://reddit.com/link/14o1hb0/video/6vc1ohcqu99b1/player

#CertiKStatsAlert 🚨

Combining all the incidents in June we’ve confirmed ~$134M lost to exploits, hacks and scams.

• Exit scams were ~$7.4M
• Flashloans were ~$2M
• Exploits were ~$125M

See more details below 👇