Research

All
Security Insights
Development Insights
Security Audits
Sort Sort
Newest to Oldest
Oldest to Newest
Alphabetical: A-Z
Alphabetical: Z-A
Square view
List view
Linea Yield Manager Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

A Mental Model for EVM Developers Building on Sui

Eric Nordelo

Across Protocol - ERC-3009 and Deterministic DepositIds Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Taiko Shasta Protocol Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Web3 Security Auditor's 2025 Rewind

Jainil Vora, Frank Lei, Kose Dogus & Ionut-Viorel Gingu

Taiko Shasta Protocol Re Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Labs UNIfication Fees Diff Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Labs UNIfication Fees UNIVesting Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Labs UNIfication Fees Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

How Compiler Targets Affect Unsafe Rust's Behavior

Jonas Merhej

ClaimVault Security Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

The Notorious Bug Digest #6: Balancer Side Story and Rust Specific Issues

Jonas Merhej, Frank Lei, Ionut-Viorel Gingu

GnoSwap Extended Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

GnoSwap Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

TokenOps Zama Confidential Airdrop Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Labs The Compact Emissary Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Labs The Compact Tribunal Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

The Compact Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

A Developer’s Guide to FHEVM Security
Sebastian Fabry

Sebastian Fabry

Blockchain Security Researcher

OIF Broadcaster Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Sponsored Periphery Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap ERC20ETH Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Calibur Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Sponsored CCTP Deposits from Solana Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Helios System Update Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

OIF Contracts Diff Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Zaiffer Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Zisk Binary and Main Review
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Starknet Integration Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

BridgeV2 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Lombard GMP Contracts Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Katana Integration Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

BARD Token Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Lombard Solana Integration Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Lombard Incremental Sui and Blacklist Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Lombard Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Understanding the Balancer v2 Exploit: Technical Analysis and Lessons for the Blockchain Industry
Demian Brener, Dario Lo Buglio, Mateo Cesaroni, Christian Santagata, John Neufeld

Demian Brener, Dario Lo Buglio, Mateo Cesaroni, Christian Santagata, John Neufeld

Linea Burn Mechanism Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

XAUt0 TON OFT Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

OneSig Phase 2 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Everdawn USDT0 ERC-7802 Upgrade Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

USDT0 Transaction Helper Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

USDT0 Child Token Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

OneSig Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

tGBP Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

9Lives CPMM Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Eclipse Solidity Bridge Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Jovay Rollup Contracts Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Jovay TEE Verifier Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Jovay Sequencer System Contracts Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

1inch Cross-Chain Swap V1.1.0 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZKsync OS Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Very Liquid Vaults Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ADI Token Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Spline Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Anvil Protocol Diff Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Vesu V2 Differential Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Interactive Sigma Proofs and Fiat-Shamir Transformation Proof of Concept Implementation Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Inside Ethereum's Engine: How the Execution Layer Actually Works
Ezequiel Perez

Ezequiel Perez

Blockchain Security Researcher

The Notorious Bug Digest #5: Post EIP-7702 Pitfalls, JIT Penalty Rebates, and Manipulation of Recursive Functions
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZKsync V29 Release Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZEROBASE Token Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Linea TGE Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

USDT0 Polygon Integration Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

A Developer’s Guide to Building Safe Noir Circuits
Felix Wegener

Felix Wegener

Blockchain Security Research Manager

Managed Optimistic Oracle Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Beyond Zero Knowledge: How Fully Homomorphic Encryption Enables Private Shared State
Sam Wong

Sam Wong

Blockchain Security Researcher

The Notorious Bug Digest #4
Frank Lei

Frank Lei

Blockchain Security Researcher

Fiamma Bridge Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

f(x) v2 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Crown BRL Stablecoin Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

CapyFi Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Inside ZKStack's Crosschain Architecture — Part II: Gateway Settlement & Recursive Proofs
Andrianna Polydouri

Andrianna Polydouri

Fusion Swap for Solana Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

1inch Protocol Fee Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Inside ZKStack's Crosschain Architecture — Part I: A Deep Dive into Merkle Tree Hierarchies
Andrianna Polydouri

Andrianna Polydouri

OpenZeppelin Uniswap Hooks v1.1.0 RC 1 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

OpenZeppelin Uniswap Hooks v1.1.0 RC 2 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Oxorio SAMM Module Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Stellar Contracts Library v0.3.0-rc.2 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Periphery Changes Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Across Protocol OFT Integration Differential Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Stylus Contracts Library v0.2.0 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Testing Arbitrum Stylus Smart Contracts with Motsu
Nenad Misić

Nenad Misić

Open Source Developer

Six Questions To Ask Before Writing a Uniswap v4 Hook
Yuguang Ipsen

Yuguang Ipsen

Blockchain Security Researcher

The Notorious Bug Digest #3
Ionut-Viorel Gingu

Ionut-Viorel Gingu

Blockchain Security Researcher

Beyond Smart Contracts: A Deep Dive into Blockchain Infrastructure Security Auditing
Smriti Verma

Smriti Verma

Blockchain Security Researcher

ERC-4626 Tokens in DeFi: Exchange Rate Manipulation Risks
Henrique Scocco

Henrique Scocco

Blockchain Security Researcher

EVM Emulator and Semi-abstracted Nonces Update Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Matter Labs Guardian Recovery Validator Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Across Protocol Diff Audit -Arbitrum CustomGasToken & ExclusivityPeriod
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Across Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

SVM Spoke Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Across Protocol SVM Solidity Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Across Linea CCTP Diff Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

EVM Universal Adapter Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

SVM Spoke Incremental Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

SP1 Helios Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Bridged USDC Support Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

UMA Oracle Bridging Contracts Upgrade Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZKsync Crypto Precompile Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZKsync Era-contracts Precompile Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZKsync Protocol Precompiles Implementation Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

FCHAIN Validator and Staking Contracts Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

WisdomTree Digital Whitelist Contexts Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

The Notorious Bug Digest #2
Frank Lei

Frank Lei

Blockchain Security Researcher

Fireblocks Upgradeable Tokens Audit - ERC721F
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Fireblocks Upgradeable Tokens Audit - ERC20F
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Fireblocks Upgradeable Tokens Audit - ERC1155F
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Fireblocks Gasless Contracts Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Mantle Op-geth & Op-stack Diff Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Uniswap Hooks Library Milestone 1 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Stellar Contracts Library 0.1.0 Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

The Notorious Bug Digest #1
Frank Lei

Frank Lei

Blockchain Security Researcher

From Stage 0 to Stage 1: Security Council Best Practices in Rollup Governance
Bram Hoogenkamp

Bram Hoogenkamp

Open Source Product Manager

Poseidon go brr with Stylus: Cryptographic functions are 18x more gas-efficient via Rust on Arbitrum
Aleksandr Koshkosh

Aleksandr Koshkosh

ZKsync Paymaster Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

ZK Token, Capped Minter, and Merkle Distributor Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Distributor Diff Audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Web3 Security Auditor's 2024 Rewind
Ionut-Viorel Gingu

Ionut-Viorel Gingu

Blockchain Security Researcher

What is a Smart Contract Audit: Lessons from OpenZeppelin’s 700+ Audits
Christian Santagata

Christian Santagata

Head of Marketing

Add Tests To Your Stylus Contracts
Sebastian Perez

Sebastian Perez

Top 10 Blockchain Hacking Techniques 2023
Nikita Stupin

Nikita Stupin

Blockchain Security Researcher

Why Your Code Needs To Be Self-Contained
Sebastian Fabry

Sebastian Fabry

Blockchain Security Researcher

Top 10 Blockchain Hacking Techniques of 2023: Community Nominations
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Secure Implementations & Vulnerable Integrations in Smart Contracts: ERC-2771 Crisis Management
OpenZeppelin Security

OpenZeppelin Security

Security Audits

How OpenZeppelin Foiled a Catastrophic Hack in a Compound Wargame Simulation
OpenZeppelin

OpenZeppelin

ZK-SNARKS & The Last Challenge Attack: Mind Your Fiat-Shamir!
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Arbitrary Address Spoofing Attack: ERC2771Context Multicall Public Disclosure
OpenZeppelin

OpenZeppelin

Smart Contracts & Incident Response: Insight on Current Mechanisms
Casey Erikson

Casey Erikson

OpenZeppelin Security Analysis: UniswapX
OpenZeppelin Security

OpenZeppelin Security

Security Audits

EVM Deterministic Deployments Made Easy with OpenZeppelin Defender
OpenZeppelin

OpenZeppelin

A Novel Defense Against ERC4626 Inflation Attacks
OpenZeppelin

OpenZeppelin

Security Report: Top Incidents and Insights from April - June 2023
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Cryptography 101: Building Blocks for Blockchain Security
OpenZeppelin

OpenZeppelin

ChatGPT vs Ethernaut
OpenZeppelin

OpenZeppelin

Account Abstraction's Impact on Security and User Experience
OpenZeppelin

OpenZeppelin

The Notorious B.U.G. 👑 Digests
OpenZeppelin

OpenZeppelin

How to Ensure Web3 Users Are Safe from Zero Transfer Attacks
OpenZeppelin

OpenZeppelin

Top 10 Blockchain Hacking Techniques of 2022: Final Results
OpenZeppelin

OpenZeppelin

Top 10 Blockchain Hacking Techniques of 2022: Voting Phase Open
OpenZeppelin

OpenZeppelin

Defining Industry Standards for Custom Error Messages
Stephen Webber

Stephen Webber

Improved Security Through Bytecode Verification
Stephen Webber

Stephen Webber

$15B Rugpull Vuln. in Convex Finance protocol Uncovered and Resolved
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Compound TUSD Integration Issue Retrospective
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Introducing a New Comprehensive Smart Contract Audit Readiness Guide
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Smart Contract Security Guidelines #4: Strategies for Safer Governance systems
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Smart Contract Security Guidelines #3: The Dangers of Price Oracles
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Protect Your Users With Smart Contract Timelocks
OpenZeppelin

OpenZeppelin

Smart Contract Security Guidelines #2: Strategies for Secure Access Controls
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Smart Contract Security Guidelines #1
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Indexing Smart Contracts with OpenZeppelin Subgraphs & The Graph
OpenZeppelin

OpenZeppelin

How PoolTogether Automates Operations Using OpenZeppelin Defender
OpenZeppelin

OpenZeppelin

Managing Maintenance Tasks on Chainlink Keepers Using OpenZeppelin Defender
OpenZeppelin

OpenZeppelin

Deploying More Efficient Upgradeable Contracts
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Automate Smart Contract Workflows
OpenZeppelin Security

OpenZeppelin Security

Security Audits

FEI Post Mortem
OpenZeppelin

OpenZeppelin

Building an NFT Merkle Airdrop
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Workshop Recap: Managing Smart Contract Upgrades
OpenZeppelin

OpenZeppelin

Workshop Recap: Setting Up Access Control for Smart Contracts
OpenZeppelin

OpenZeppelin

Admin Accounts and Multisigs
OpenZeppelin

OpenZeppelin

GST2 Bytecode Deep Dive
Eric Decourcy

Eric Decourcy

Blockchain Security Researcher

Workshop Recap: Cheap contract deployment through Clones
OpenZeppelin

OpenZeppelin

New Tools to Securely Manage Smart Contract Upgrades
OpenZeppelin

OpenZeppelin

Flash-Mintable Asset-Backed Tokens
OpenZeppelin

OpenZeppelin

DeFi Reflections on Hackers and Viruses
OpenZeppelin

OpenZeppelin

What is DeFi? An Introduction to Decentralized Finance
Rick Chen

Rick Chen

Blockchain Security Researcher

Backdooring Gnosis Safe Multisig wallets
OpenZeppelin

OpenZeppelin

Flash Loans and the Advent of Episodic Finance
OpenZeppelin Security

OpenZeppelin Security

Security Audits

A Year of Research at OpenZeppelin
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Deep dive into the Minimal Proxy contract
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Review Summary of Bounties Network
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Reentrancy After Istanbul
Francisco Giordano

Francisco Giordano

Libra’s Move IR Compiler Vulnerability
OpenZeppelin Security

OpenZeppelin Security

Security Audits

OpenZeppelin Uncovers Vulnerability in Libra’s Move IR Compiler
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Build your app with the Gas Station Network
Santiago Palladino

Santiago Palladino

Bypassing Smart Contract Timelocks
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Exploiting Uniswap: from reentrancy to actual profit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Sign it like you mean it: creating and verifying Ethereum signatures
OpenZeppelin

OpenZeppelin

Technical Description of Critical Vulnerability in MakerDAO Governance
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Getting started with ZepKit
OpenZeppelin

OpenZeppelin

A new wave of applications
OpenZeppelin

OpenZeppelin

Follow this quality checklist before an audit
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Testing real-world contract upgrades
Santiago Palladino

Santiago Palladino

EVM package deployment with ZeppelinOS—Part III
OpenZeppelin

OpenZeppelin

EVM package deployment with ZeppelinOS—Part II
OpenZeppelin

OpenZeppelin

State of EVM Packages – End of 2018
Santiago Palladino

Santiago Palladino

Toward a secure code ecosystem
Santiago Palladino

Santiago Palladino

The transparent proxy pattern
Santiago Palladino

Santiago Palladino

Open source collaboration in the blockchain era: EVM packages
OpenZeppelin

OpenZeppelin

Deconstructing a Solidity Contract  - Part VI: The Metadata Hash
OpenZeppelin

OpenZeppelin

Transaction Permission Layer Protocol v1.0
OpenZeppelin

OpenZeppelin

Compliant Decentralization?: Exploring an Approach to Utility Token Distribution
OpenZeppelin

OpenZeppelin

Deconstructing a Solidity Contract - Part II: Creation vs. Runtime
OpenZeppelin

OpenZeppelin

Getting started with ZeppelinOS
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Ethereum in Depth, Part 2
OpenZeppelin

OpenZeppelin

Exploring upgradeability governance in ZeppelinOS with a Gnosis MultiSig
Santiago Palladino

Santiago Palladino

Verifying identity in Venezuela through the TPL
Martin Triay

Martin Triay

Introducing the Transaction Permission Layer (TPL) Protocol
Demian Brener

Demian Brener

CEO

Ethereum in Depth, Part 1
OpenZeppelin

OpenZeppelin

Proxy Patterns
OpenZeppelin

OpenZeppelin

Upgradeability using Unstructured Storage
OpenZeppelin

OpenZeppelin

On crowdsales and multiple inheritance
OpenZeppelin

OpenZeppelin

TPL — A Framework for Secure Peer-to-Peer Exchange
Demian Brener

Demian Brener

CEO

A Gentle Introduction to Ethereum Programming, Part 3
OpenZeppelin

OpenZeppelin

A Gentle Introduction to Ethereum Programming, Part 2
OpenZeppelin

OpenZeppelin

A Gentle Introduction to Ethereum Programming, Part 1
OpenZeppelin

OpenZeppelin

The Parity Wallet Hack Reloaded
Santiago Palladino

Santiago Palladino

Evolution of Smart Contract Security in the Ethereum Ecosystem
OpenZeppelin

OpenZeppelin

A Path Toward Better Token Sales
Demian Brener

Demian Brener

CEO

Thin Protocols
OpenZeppelin

OpenZeppelin

The Parity Wallet Hack Explained
Santiago Palladino

Santiago Palladino

Setting Up a Bug Bounty Smart Contract with OpenZeppelin
OpenZeppelin

OpenZeppelin

The 4 Stages of a Token Sale
Demian Brener

Demian Brener

CEO

Handling Crowdsale Funds Securely
Francisco Giordano

Francisco Giordano

How To Create Token and Initial Coin Offering Contracts Using Truffle + Zeppelin Solidity
Martin Triay

Martin Triay

Proxy Libraries in Solidity
OpenZeppelin

OpenZeppelin

HackerGold Bug Analysis
Demian Brener

Demian Brener

CEO

On Tokens and Crowdsales: 4 Challenges and How to Tackle Them
Demian Brener

Demian Brener

CEO

Fifteen lines of code that could have prevented TheDAO Hack
OpenZeppelin Security

OpenZeppelin Security

Security Audits

Onward with Ethereum Smart Contract Security
OpenZeppelin

OpenZeppelin

On Tokens and Crowdsales
Demian Brener

Demian Brener

CEO

The Hitchhiker’s Guide to Smart Contracts in Ethereum
OpenZeppelin

OpenZeppelin

Smart Contracts You Already Signed
Demian Brener

Demian Brener

CEO

View more