Blockchain, Security, Tech

Latest — Oct 1, 2021

Monthly DeFi Blood Bath Report #5

Welcome to another instance of the Blood Bath report. This months we saw a fix of critical bug in OpenZeppelin [https://forum.openzeppelin.com/t/uupsupgradeable-vulnerability-post-mortem/15680] , a Supply Chain attack on SushiSwap and just yesterday we saw a Compound proposal that went wrong [https://www.rekt.news/overcompensated/]. Enough

More issues

Why audits shouldn't be used for marketing purposes

DeFi space is growing strong and steady. TVL is growing even faster, but also the stolen value from DeFi protocols. According to DeFiPulse, the Total Value Locked in DeFi projects is roughly $90.16B. Hacks keep happening even though more projects are getting audited. For me, who audits smart contracts

Monthly DeFi Blood Bath Report #4

Welcome to another instance of the Blood Bath report. This month was the craziest one in the whole DeFi history due to two events: the Poly Network hack and Samczun’s Whitehack of Sushiswap. This month we saw some big hacks, even excluding PolyNetwork. But what is also important, we

Importance of taking a vacation

I'm back! So good to be back and writing again. As you may have noticed (or not), I was gone for 16 days. I went with my wife on vacation to Portugal. I'm not saying this to brag but to explain why it is essential to take a more extended

100 days of daily blogging

Can't believe I'm typing these words, but today marks the 100th day of my daily blogging challenge! I made it 😭 I can't believe it, but I made it! It was one hell of a journey that I would definitely do again! I met amazing people along the way that I

How to stay up to date with BlocSec news?

Being an auditor is not an easy job. There’s a lot of pressure on us to do our job perfectly. If we don’t, and we miss something, millions are on the line. It’s a bit different than standard web security, where there can be breaches and databases

China/US crypto news #1

Recently there was a lot of happening in the China and US, crypto wise, from different policy makers. The Central Bank of China declared it will continue its high pressure on different virtual currency trading. USA on the other hand decided to start its own crackdown on crypto exchanges and

Why is self-auditing a bad idea?

While scrolling through Twitter, I stumbled upon this tweet from Ashton Kutcher. > We’re auditing ourselves. We followed the industry standards and haven’t found any glitches. But, we believe we should hold ourselves to higher standards. We learned a lot and are going to write it all up and

Monthly DeFi Blood bath report #3

Welcome to another instance of Blood bath report. This month we saw many bridges burning and some questionable design decisions that led to hacks. Let’s dive into the topic. Below you will find a summary of all hacks that had happened. All info was compiled from openblocksec [https://github.

Do you need to know programming to work as an auditor?

Yes . . . . . . I get this question lately a lot. My answer to this is Yes, profound Yes. Without programming knowledge, you wouldn't know what parts of the system to check, how to check them, etc. In Ethereum, you have few options to chose from. Solidity is the most popular smart contract