Security on DeFi + TradFi = ♡

Comprehensive Smart Contract Audit with Certora Formal Verification

Wed, 17 Dec 2025 08:36:59 +0000

Hey guys, in this blog post, we’re going to perform a security assessment of a smart contract and, with the help of Certora’s formal verification tool, try to prove there are no “High” severity issues residing in the source code.

Replaying Bugs With Certora: Sorra Finance

Fri, 23 May 2025 09:38:30 +0000

In this blog post we’re going to deep dive into the Sorra Finance hack, find the root cause of the bug and create a certora rule which could’ve prevented the exploit.

Research: ERC20 Self Transfer

Tue, 13 May 2025 08:57:43 +0000

Overview

In this blog post we’re going to:{{ double-space-with-newline }}1. Understand how ERC20 self transfer vulnerability works in smart contracts{{ double-space-with-newline }}2. Create a semgrep rule for finding such contracts{{ double-space-with-newline }}3. Scan https://github.com/tintinweb/smart-contract-sanctuary to better understand how many contracts exist with such bug

HTB Validation writeup

Thu, 23 Sep 2021 22:02:33 +0000

In this tutorial we will get root access for the Validation machine from Hack The Box.

Web penetration testing

Tue, 21 Sep 2021 15:00:05 +0000

In this tutorial we’re going to define base steps for web penetration testing and find vulnerabilities in DVWA.

Network penetration testing

Sat, 11 Sep 2021 10:04:28 +0000

In this tutorial we’re going to identify running services on the target server and try to exploit them.

Passive information gathering

Tue, 07 Sep 2021 22:55:09 +0000

The 1st step of any penetration test is gathering information about the target company. In this tutorial we will go through all the steps required for passive information gathering.

Android reverse engineering

Wed, 01 Sep 2021 00:12:22 +0000

Hello everybody. In this tutorial we’re going to reverse engineer a vulnerable android app, find all vulnerabilities and create a report.