Our blog posts

Learn how to prevent griefing attacks in smart contracts with real examples and fixes from the Solodit checklist. Build resilient blockchain protocols.

Learn how front-running attacks exploit blockchain transparency and how to defend your smart contracts with secure patterns and best practices.

Learn how Donation Attacks exploit token balance assumptions in smart contracts and how to secure your protocol with internal accounting.

Learn how to prevent denial-of-service (DoS) attacks in smart contracts by securing queues, handling low-decimal tokens, and managing external calls safely.

Learn how to prevent denial-of-service (DoS) attacks in smart contracts. Explore common patterns, real-world examples, and secure coding practices in DeFi.

Explore the Solodit Checklist to build secure smart contracts. Learn practical tips, code analysis, and real-world insights to strengthen your blockchain projects.

Explore top blockchain developer certifications for 2025. Learn which credentials boost your career, prove your skills, and increase your earning potential.

Become a Cyfrin Ambassador, try Aderyn for real-time vulnerability detection, level up with the rETH course, and catch up on major hacks, audits, and insights.

Learn what your hardware wallet must display before you sign. Verify key details in messages and transactions to avoid scams because security starts with you.

Secure your Solidity smart contracts effortlessly. Cyfrin's Aderyn VS Code Extension detects vulnerabilities in real-time directly within your coding workflow.

Explore Uniswap V4's swap mechanics with an in-depth look at flash accounting, transient storage, and execution flow through detailed code examples and analysis.

Become a Cyfrin Ambassador to lead blockchain security, educate communities, and connect with industry leaders. Apply now to drive blockchain innovation!

Ensure secure ZKsync governance with a powerful CLI tool for verifying proposals, decoding transactions, and preventing front-end spoofing before approval.

Discover how multi-party computation (MPC) enables secure collaboration without exposing private data. Learn its history, security models, and uses.

Discover how Solodit transformed security research—turning reports into a winning strategy for blockchain security contests. Learn the method top pros use.

Stay ahead in Web3 security! Explore the Bybit $1.4B hack, top exploits, smart contract tips, and tools to protect your assets in Cyfrin’s latest security update.

Discover how hackers exploited Safe’s infrastructure, leading to Bybit’s record-breaking $1.4B theft. A deep dive into the attack, security flaws, and key takeaways.

Enhance web3 OpSec with proven security strategies for protocols. Learn layered defenses, key handling, and secure processes to protect user and protocol funds.

Learn how improper input validation in Solidity can lead to exploits. Explore best practices for securing your smart contracts and preventing security risks.

Learn Vyper for secure smart contract development. Explore its features, security benefits, Solidity comparison, installation, and real-world DeFi use cases.

Learn how to set up a Safe multi-sig wallet for enhanced security. Protect your protocol, DAO, or assets with this step-by-step guide.

Discover key vulnerabilities in DeFi liquidation code, potential exploits, and best practices to safeguard protocol solvency and user trust.

Explore Cyfrin's new blockchain certifications, security updates, and resources for smart contract developers in February 2025's newsletter.

CodeHawks partners with Guardian Audits, OpenZeppelin, and Hashlock to enhance protocol security through multi-phased, co-hosted smart contract audits.

Understand Solidity smart contract reverts, their function, and how to handle them. Explore require, revert, assert, gas errors, and try/catch for secure development.

Learn how to verify Safe multi-sig wallet signatures with Cyfrin's safe-tx-hashes tool - the fix for the Radiant Capital hack.

Learn how isolated development environments like Docker containers can protect your code and sensitive data from cyber threats. Stay secure and informed!

Introducing Cyfrin Updraft's Blockchain Developer Certifications, enabling developers to demonstrate expertise with industry-recognized, expert-endorsed credentials.

Explore advanced web3 scams like MEV attacks, SIM swaps, and DNS compromises, with actionable OPSEC tips to protect your assets and avoid becoming a victim.

Learn how to protect yourself from crypto scams in web3. This guide covers phishing, malware, wallet security, and private key management to safeguard assets.

Learn about blockchain RPC nodes: what they are, how they work, their types, key functions, providers, and security considerations in this detailed guide.

Cyfrin saw significant growth in 2024 doubling the team, securing over $10b in blockchain assets, and educating 200k+ students on smart contract development.

Cyfrin’s guide to the best Solidity gas optimization techniques for Base and other L2 Chains. Reduce cost with advanced, real-world, and tested strategies.

A sophisticated supply chain attack has compromized versions 1.95.6 and v1.95.7 of the widely-used @solana/web3.js JavaScript library.

Learn how account abstraction makes crypto safer and easier to use. It adds security features and removes technical barriers to blockchain adoption.

Learn what blockchain interoperability is and why it matters. Discover how leading protocols combine its core components to deliver value across industries.

Discover Uniswap V4 architectural updates and technical innovations: new hook system, singleton pattern, flash accounting, fee tier flexibility, native token support.

Introducing Cyfrin Profiles, a unique, personal account delivering a unified experience across the Cyfrin ecosystem.

Explore 7 tips to transition from traditional cybersecurity into blockchain security research. Get tips for navigating the industry and maximizing your opportunity.

Blockchain unconfirmed transactions are transactions sent to the blockchain network but not yet included in a block.

Aderyn's Language Server elevates Solidity developers' experience by providing real-time security diagnostics and coding best practices in any code editor.

Flash loans are unique financial products, only available in DeFi. This blog post will teach you what a flash loan is, how it works, and what it can be used for.

Fraud proofs and validity proofs are both used by rollups to check the validity of transactions. Delve into their differences, functions, and advantages and disadvantages

What are zk-SNARKs and what are zk-STARKs? They're both zero-knowledge proofs but what are their features and how do they compare to each other.

Explore ZK and Succinct rollups. Answer the questions: what are ZK rollups, how do they work, and why are they considered the future of Ethereum scaling?

What is a zero-knowledge proof (ZKP) and how do they work? Explore ZKPs, survey mathematical ZKPs, and understand what programmers need to know to implement them.

Top 10 Solidity interview questions to help you prepare for your next Solidity technical initerview. Join your dream team as a smart contract developer!

Discover how to prepare for a Web3 hackathon—from selecting the right event to building a team and managing deadlines—to boost your skills and maximize your fun.

Learn what a crypto honeypot is, how these scams trap unsuspecting investors, and discover strategies to identify and avoid them. Stay safe in crypto.

Build your Solidity developer portfolio with 5 beginner projects, including crypto lotteries and DAOs. Master smart contracts and excel in the Web3 job market.

Cyfrin supports Soneium as ecosystem security partner for their public blockchain ecosystem. Read more about the collaboration and what it means for security.

Build dApps faster with Web3 tools like Chainlink, Alchemy, and Thirdweb. Use pre-built components and trusted resources for secure, scalable projects.

Learn what Soulbound Tokens (SBTs) are, their differences from NFTs, and explore use cases like digital identity and certifications with insights into ERC-5114 and ERC-54

Learn to implement Permit2, the token approval system compatible with all ERC-20 tokens that streamlines user experience and reduces their economic burden.

Cyfrin and PwC Partner To Strengthen Blockchain Security And Scale Adoption of Blockchain Technology.

Solidity is a high-level Programming Language for writing Smart Contracts on Ethereum and most EVM-compatible blockchains. Learn more in Cyfrin's deep dive.

Cyfrin's Iintroduction to Ethereum improvement proposals (EIPs). A guide to understanding what they are, how they work, and their importance to the Ethereum ecosystem.

Deep dive into a Merkle Tree's data structure and how Merkle proofs prove data is there. Answer the question: What is a Merkle Tree, Merkle Proof, and Merkle Root?

Blockchain technology opens new avenues of commerce and asset ownership. It also comes with a lot of hype. What are the real use cases for blockchain technology?

Introducing Hooks into DEX Liquidity Pools ushers in a new era of customization. Discover how they add functionality, reduce risk, and increase potential rewards.

Learn about Distributed Validator Technology (DVT) and how it can increase the Ethereum's decentralization, make staking more appealing, and increase network security.

A completely redesigned competitive smart contract security audit platform with new features and functionality, improved processes, and industry-leading usability.

Learn where the EVM can read and write data, what calldata, memory, and storage are, and the best practices to know when writing your solidity or Vyper smart contracts

The beacon chain is a fundamental component of Ethereum 2.0, designed to enhance scalability, security, and efficiency by transitioning from a proof of work (PoW) to a pr

Tokenized RWAs are real-world assets represented as tokens on the blockchain. Learn what crypto RWAs means, how they work and the list of projects to keep an eye on.

What is the EIP-4844? Learn what proto-danksharding and blobs are, how they work, and how to send your first blob transaction using the new Ethereum improvement proposal

In this guide, we explore what are the differences between Proof of Work (PoW) and. Proof of Stake (PoS), two Sybil resistance mechanisms used in blockchain networks.

What are crypto blockchain rollups? Learn everything you need to know about optimistic and zero-knowledge based rollups, how they work, and their differences.

Cyfrin supports projects and developers on zkSync in accessing high-quality public and private audits as well as top-notch smart contract development and security courses

An L1, or Layer 1 blockchain, refers to the base layer of a blockchain ecosystem. Learn everything you need to know about what are layer 1 blockchains and how they work.

Front-running in crypto or Blockchain occurs when someone intentionally enters a transaction into a block before you to try to extract some value.

Learn the intricacies of blockchain architectures like Ethereum and Bitcoin, broken down into easy-to-understand pieces. From functional layers to layers 1 and 2.

Open-sourced Rust-based Smart Contract static analyzer designed to help protocol engineers and security researchers find vulnerabilities in Solidity code bases

The ABI of a smart contract is an acronym for the “Application Binary Interface.” It defines the standard way to interact with contracts in the Ethereum ecosystem;

What is an Ethereum blockchain testnet? Learn everything you need to know about crypto testnets, faucets and how blockchain test networks work in this comprehensive guide

Learn how to console log variables in Solidity smart contracts using Foundry and Hardhat and debug your smart contracts without using events.

Learn what is a blockchain mempool on Ethereum and Bitcoin, how it works and what private mempools are.

A crypto Hardware Wallet is a physical device that Securely Stores private cryptographic keys offline. Learn More in Cyfrin's Full Guide to hardware wallets.

A cold storage crypto wallet is a type that isn’t connected to the internet and is less likely to be exposed to online threats like malware or phishing attacks.

What is a Reentrancy Attack in Solidity smart contracts? Learn how blockchain reentrancy attacks work and how to protect your smart contracts from them.

The best free smart contract development courses, boot camps, certifications, and resources to learn Solidity development from scratch and kickstart your career.

Cyfrin has formed an alliance with Chainlink Labs to provide Chainlink BUILD and SCALE projects with industry-leading security

Top smart contract auditing and security courses to become a smart contract auditor or level up your web3 development career

Explore 10 key steps to systematically approach a smart contract audit as a security researcher, regardless of code size or complexity.

On March 5th 2024, WOOFi’s synthetic proactive market making (sPMM) algorithm that controls the pricing of WOOFi Swaps was exploited on Arbitrum for $8.6M. Here's how.

Seneca Protocol is a decentralized finance product which was exploited for $6million. Here is how it happened, a proof of concept, and how to mitigate it.

We’ve tested and found the best smart contract auditing and security tools that every web3 smart contract developer should include in their stack.

Sybil attacks undermine the integrity and security of blockchain networks. This article explores what is Sybil resistance, its consequences, and mitigations.

EIP 3664 extends NFT standards to enable customizable, interoperable, and evolvable NFT attributes. You'll learn how to use it, how it works, and its ecosystem impact.

In this article, we explore how blockchain double spending attacks occur, with examples and ways to mitigate and avoid them.

Euler Finance was hacked for ~$200M due to a missing check on the liquidity status. We explore a step by step of how this attack happened, including a proof of concept.

White hatting a protocol means exploiting a vulnerability in a smart contract to save funds, rather than steal them.

Learn how to write Solidity smart contract fuzz tests (fuzzing) using the Foundry framework. Write tests, use prank addresses, and execute them using forge.

Proxy Smart Contracts patterns are a simple and effective way to create upgradable smart contracts to keep your protocol up to date.

The Elliptic Curve Digital Signature Algorithm (ECDSA) is based on Elliptic Curve Cryptography (ECC) and is used to generate keys, authenticate, sign, and verify messages

Learn everything you need to know about the (Ethereum improvement proposal) EIP-191, EIP-712, and Ethereum signature standards.

Learn what a blockchain replay attack is how it works through 5 common examples.

Learn everything you need to know about Blockchain multichain bridges, how they work, and why they're useful for

A Smart Contract Security Audit is a time-boxed, Security-based code review of a Smart Contract or Protocol to enhance Security and identify vulnerabilities.

Smart contracts have been tested and audited, but are they truly bulletproof? When you think your code is secure, an attacker might exploit a vulnerability that you