Short reads exploring specific aspects of post-quantum, autonomous AI, and on-chain security. New pieces roughly monthly per shift.
Bridged tokens are commonly treated as equivalent to the original asset. However, wrapped tokens have significant security risks that can jeopardize their real value.
Web3 hacks are common, but they're not all performed for the same reasons. The nature of Web3 and the practice of post-exploit bounty offers can make it difficult to differentiate a "rescue" and an "attack".
"Not your keys, not your crypto" is a key concept in Web3. However, self-custody isn't always as great as it's made out to be.
Stablecoins are commonly marketed as being less volatile than other cryptocurrency while maintaining decentralization. However, this isn't the case.
Decentralization is one of the core selling points of Bitcoin and other blockchains. However, the reality is that most layers of the Web3 infrastructure exhibit a surprising and unfortunate level of centralization.
Smart contract audits have become commonplace in Web3, but large-scale attacks are still happening. There are many reasons for this, ranging from limited scoping to the growth of AI-driven analysis.
Blockchain immutability is a valuable on-chain security control, but it can easily be overstated. Counting on smart contract immutability can leave Web3 projects vulnerable.
Quantum computing is described as a major threat to data encryption and confidentiality. However, the real threat in Web3 is quantum computing breaking ECDSA digital signatures.
An introduction to flash loans and how they can be used to attack DeFi protocols.