Here is a list of malicious VS Code extensions that target developers and crypto projects.

Be careful what you install.

Guiding DeFi developers through every step of launching a Uniswap Hook. Designed with industry experts.

Liquidation code can contain subtle bugs and vulnerabilities..

Remedy CTF is Hexens' first capture the flag competition focused on Web3 security.

In this long read, we explore the rise of P2P lending in DeFi, with a focus on Morpho, and reveal key findings in this fascinating product direction.

ArbiterAgent is an open source AI-powered triage system that aggregates, deduplicates, and assigns severity to vulnerability findings from multiple AI auditing agents. It ensures consistent scoring...

A set of exercises to practice Yul. Contribute to RareSkills/yul-puzzles development by creating an account on GitHub.

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

Flash Loans and how to hack them: a walk through of ERC 3156Flash loans are loans between smart contracts that must be repaid in the same transaction. This article describes the ERC 3156 flash loan specification as well as the ways flash lenders and borrowers…

Lazarus Strikes Again: A Flaw in EVM, Smart Contracts, Multisig or Safe {Wallet}? Can Web3 Ever Be Truly Secure? Exclusive Research by Hacken.

The recent ByBit hack—where the Lazarus group drained $1.5 billion in ETH and stETH from a multisig cold wallet—has…

This book on proxy patterns is the most comprehensive guide to smart contract upgradeability available with over 16 chapters. 100% free with no login.

Organizations are rushing to integrate Large Language Models (LLMs) in order to improve their online customer experience. This exposes them to web LLM ...

🔥AI x Smart Contract Security Tools by the DeFiHackLabs whitehats

DeFiHackLabs whitehats have built 4 powerful AI-driven auditing tools — boosting security, saving time, and catching real bugs (>$60K worth)!

All are open-source & ready to use.
🧵Thread with…

How to use AI (specifically LLMs) in your web3 security workflow.

Yesterday I atended a discord livestream hosted by @xyz_remedy interviewing @sammyaudits

Here is what I learned: 🧵

After over a year of writing, running and iteration on Invariant Testing with Echidna and Medusa.

Saving 100s of millions via audits and over 20 millions of live funds.

We're Open Sourcing the Recon Extension!

The one extension to write and improve your…