best practices
December 05, 2024
Secure Private Key Management for DApps
Clear instructions and best security practices to ensure the secure usage of private keys for smart contract management. Why does private…
Paweł Kuryłowicz
Managing Partner & Smart Contract Security Auditor
January 23, 2024
Uniswap V4: Bad hook with broken access control
The threat scenario covered in this article is "attacker calls hooks directly on the hook contract". The example illustrating such a…
Damian Rusinek
Managing Partner & Smart Contract Security Auditor
December 19, 2023
Uniswap V4: Liquidity Theft via Hook Fee
This article is one of a series where we present some implementations of "Bad Hooks" as part of our research supported by the Uniswap…
Damian Rusinek
Managing Partner & Smart Contract Security Auditor
June 25, 2024
Web3 Founder: 5 questions that help improve security for FREE
Learn five essential questions every Web3 founder should ask themselves to increase the security of their project without incurring…
Paweł Kuryłowicz
Managing Partner & Smart Contract Security Auditor
January 11, 2024
Protect your account: SIM swap hack
Learn more about the SIM card swap scam which is one of the most popular attack vectors for X account hijacking. SIM swap scam Recently…
Paweł Kuryłowicz
Managing Partner & Smart Contract Security Auditor
December 07, 2023
Uniswap V4: Re-Initialization Leading to Funds Locked
This article is one of a series where we present some implementations of “Bad Hooks” as part of our research supported by the Uniswap…
Damian Rusinek
Managing Partner & Smart Contract Security Auditor
February 13, 2024
Best ways to secure your X account
Learn how to effectively protect your X account. Do not let hackers take control. Why is it worth taking care of it? Security is not only…
Paweł Kuryłowicz
Managing Partner & Smart Contract Security Auditor
January 02, 2024
Uniswap V4: Oracle hook with malicious owner
The threat scenario covered in this article is "malicious hook owner updates the oracle parameters resulting in invalid price". The example…
Damian Rusinek
Managing Partner & Smart Contract Security Auditor
November 28, 2023
Threats for UniswapV4 hooks
Uniswap Foundation Grant Uniswap is undoubtedly the OG and trendsetter in the crypto ecosystem. The new Uniswap update is the largest yet…
Damian Rusinek
Managing Partner & Smart Contract Security Auditor
