Web3

Crypto Drainers are Targeting Cryptocurrency Users
As cryptocurrency becomes more popular and the adoption rises, we see a related increase in the number of cybercrimes, fraud, and malware schemes. Criminals like to hunt and plunder where there is ...

Security audit of smart contracts in TON: key mistakes and tips
Hi everyone, I’m Sergey Sobolev, a smart contract auditor and security researcher at positive.com. Our team specializes in smart contract auditing. Today, I will share the results of our team’s research and ...

Formal verification of smart contracts in the ConCert framework
Hey! My name’s Kirill Ziborov and I’m a member of the Positive Web3 Team. In this article, I would like to discuss methods and tools for the formal verification of smart contracts ...

Squarespace Hacked — DeFi Wallets Drained (Imaginary Money Stolen)
DeFAIL: Cryptocurrency fans lose their worthless tokens via phishing attacks on decentralized finance sites ...
Why Will CyberSecurity Become the Least of your Concern?
Why Will CyberSecurity Become the Least of your Concern?Cybersecurity attacks, including phishing, vishing, smishing, and everything else “ishing,” continues to rise and become even more of a problem for organizations and individuals.The ...

Web3 Trust Dependencies: A Closer Look at Development Frameworks & Tools
In the world of headline-grabbing smart contract exploits, developers and other stakeholders often skew their security attention in one direction; namely, they tend to focus on on-chain code, yet often neglect framework ...

Web3 Domain Alliance Emerges to Address Cybersecurity Concerns
A Web3 Domain Alliance has been formed this week to create domains that will advance interoperability of Web3 domain registries and better secure digital identities by preventing, for example, cybersquatting. Members of ...

The Economy of Trust in Smart Contract Security
As blockchain and crypto technology transitions from experimental to mainstream, the importance of top-tier security is becoming increasingly relevant. As we discussed in a recent post, organizations are grappling with the fact ...

FAIL: Nomad DeFi Bridge ‘Loses’ $190M of Worthless Tokens
Cryptocurrency startup Nomad claimed its “optimistic bridging” protocol would “would keep users’ funds safe.” We take a closer look ...

Ice Phishing Takes Advantage of Tectonic Shift to Web3
The Badger DAO attack last November and December—during which an attacker stole about $121 million from users—is a good example of “ice phishing” on the blockchain. If that term conjures up images ...